CVE-2018-0438
A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator.
Does this matter?
A public exploit is published in Exploit-DB and the impact is high, while EPSS rates exploitation at 1.4%. Anyone can run this; patch or mitigate before the next change window and check exposed instances for signs of use.
Description
A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper implementation of file system permissions, which could allow non-administrative users to place files within restricted directories. An attacker could exploit this vulnerability by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges.
- CVSS 3.0
- 7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.37% probability · 72th percentile
- Public exploits
- 1 in Exploit-DB · first 6 September 2018
- CISA KEV
- Not listed
- Weakness
- CWE-20, CWE-269
- Affected
- cisco/umbrella enterprise roaming client
- Source
- psirt@cisco.com
EPSS 1.4% since 27 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
Public exploits (1)
Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.
References
- http://www.securityfocus.com/bid/105286Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-file-readVendor Advisory
- https://www.exploit-db.com/exploits/45339/Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/105286Third Party Advisory, VDB Entry
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-file-readVendor Advisory
- https://www.exploit-db.com/exploits/45339/Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.