CVE-2020-3588

🗓️ 06 Nov 2020 18:16:48Reported by ciscoType

A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment optimization. This vulnerability is due to improper validation of messages processed by the Cisco Webex Meetings Desktop App. A local attacker with limited privileges could exploit this vulnerability by sending malicious messages to the affected software by using the virtualization channel interface

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2020-3588	6 Nov 202022:51	–	circl
Cisco	Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability	4 Nov 202016:00	–	cisco
Tenable Nessus	Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability (cisco-sa-webex-vdi-qQrpBwuJ)	6 Nov 202000:00	–	nessus
Cvelist	CVE-2020-3588 Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability	6 Nov 202018:16	–	cvelist
EUVD	EUVD-2020-24859	7 Oct 202500:30	–	euvd
NCSC	Multiple vulnerabilities in Cisco Webex products	5 Nov 202000:00	–	ncsc
NVD	CVE-2020-3588	6 Nov 202019:15	–	nvd
Prion	Input validation	6 Nov 202019:15	–	prion
ThreatPost	Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched	5 Nov 202015:16	–	threatpost
Vulnrichment	CVE-2020-3588 Cisco Webex Meetings Desktop App Arbitrary Code Execution Vulnerability	6 Nov 202018:16	–	vulnrichment

NVD

Node

cisco webex_meetingsRange<40.6.9windows

cisco webex_meetingsRange40.8.0–40.8.9windows

[
  {
    "product": "Cisco Webex Meetings Desktop App",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-vdi-qQrpBwuJ

21 Nov 2024 05:31Current

7.5High risk

Vulners AI Score7.5

CVSS 24.6

CVSS 3.17.3 - 7.8

EPSS0.00047

SSVC

CWE-22