The software for Cisco Webex Meetings Server, Cisco Webex Meetings Desktop App, and Cisco Webex Teams – a collaboration tool for Windows operating systems – has vulnerabilities related to errors in the path validation mechanism for dynamically loaded libraries. This allows attackers to execute arbitrary code.

🗓️ 11 Nov 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Path validation flaws in dynamically loaded libraries enable arbitrary code execution on Cisco Webex products for Windows.

Reporter	Title	Published	Views	Family All 14
Cisco	Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability	2 Jun 202116:00	–	cisco
Tenable Nessus	Cisco Webex Meetings DLL Injection (cisco-sa-webex-dll-inject-XNmcSGTU)	17 Jun 202100:00	–	nessus
Tenable Nessus	Cisco Webex Network Recording Player and Cisco Webex Player DLL Injection (cisco-sa-webex-dll-inject-XNmcSGTU)	17 Jun 202100:00	–	nessus
Tenable Nessus	Cisco Webex Teams for Windows DLL Injection (cisco-sa-webex-dll-inject-XNmcSGTU)	17 Jun 202100:00	–	nessus
CNNVD	Cisco Webex Teams代码问题漏洞	2 Jun 202100:00	–	cnnvd
CVE	CVE-2021-1536	4 Jun 202116:45	–	cve
Cvelist	CVE-2021-1536 Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability	4 Jun 202116:45	–	cvelist
EUVD	EUVD-2021-7003	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco Webex Meetings and Webex Server	3 Jun 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Cisco Webex Player and Webex Network Recording Player	3 Jun 202100:00	–	ncsc

Vulners

Node

cisco_systems webex_meetings_desktop_appRange<41.1.5.11windows

OR

cisco_systems webex_meetings_desktop_appRange41.2.0.0–41.2.9.23windows

OR

cisco_systems webex_network_recording_playerRange<41.1.5.11

OR

cisco_systems webex_network_recording_playerRange41.2.0.0–41.2.9.23

OR

cisco_systems webex_teams_for_windowRange<41.3.0.18986

OR

cisco_systems webex_teams_for_windowRange41.4.0–41.4.0.18737

OR

cisco_systems webex_teams_for_windowRange41.5.0–41.5.0.18815

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2021060308
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-dll-inject-XNmcSGTU
web	www.web.nvd.nist.gov/view/vuln/detail

11 Nov 2021 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 26.8

CVSS 37.3

EPSS0.00326

Webex Meetings Server Webex Desktop App Webex Teams Windows Path validation Dynamically loaded libraries Arbitrary code execution