The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing an attacker to execute arbitrary code.

🗓️ 23 Nov 2018 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Webex Network Recording Player and Webex Player for Windows have input validation flaws enabling arbitrary code execution via crafted ARF or WRF files.

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing an attacker to execute arbitrary code.	23 Nov 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing an attacker to execute arbitrary code.	23 Nov 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing an attacker to execute arbitrary code.	23 Nov 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems stems from insufficient validation of input data, allowing attackers to execute arbitrary code.	23 Nov 201800:00	–	bdu_fstec
Cisco	Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities	3 Oct 201816:00	–	cisco
CVE	CVE-2018-15408	5 Oct 201814:00	–	cve
CVE	CVE-2018-15411	5 Oct 201814:00	–	cve
Cvelist	CVE-2018-15408 Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities	5 Oct 201814:00	–	cvelist
Cvelist	CVE-2018-15411 Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerabilities	5 Oct 201814:00	–	cvelist
EUVD	EUVD-2018-7286	7 Oct 202500:30	–	euvd

Vulners

Node

cisco_systems webex_meetings_suite_wbs33_sitesRange<33.4

OR

cisco_systems webex_meetings_onlineRange<1.3.37

OR

cisco_systems webex_meetings_suite_wbs32_sitesRange<32.15.30

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181003-webex-rce
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-15408
securityfocus	www.securityfocus.com/bid/105520
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

6Medium risk

Vulners AI Score6

CVSS 27.2

CVSS 37.8

EPSS0.00224

Cisco Webex Player input validation flaw arbitrary code execution crafted files advanced recording format webex recording format windows platform