A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local malicious user to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker could exploit this vulnerability by placing a file in a specific location in the Windows file system. A successful exploit could allow the malicious user to bypass configured policy and install unapproved applications.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco umbrella roaming client 2.2.238 |
Vulmon