Lucene search

CiscoCVE-2021-1517

HistoryJun 04, 2021 - 5:15 p.m.

CVE-2021-1517

2021-06-0417:15:08

CWE-693

cisco

web.nvd.nist.gov

cve-2021-1517

cisco

webex

meetings

multimedia viewer

vulnerability

security bypass

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

31.7%

JSON

A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.

Affected configurations

Nvd

Node

ciscowebex_meetings_onlineMatch41.3.5

ciscowebex_meetings_serverRange<3.0

ciscowebex_meetings_serverMatch3.0-

ciscowebex_meetings_serverMatch3.0maintenance_release1

ciscowebex_meetings_serverMatch3.0maintenance_release2

ciscowebex_meetings_serverMatch3.0maintenance_release3

ciscowebex_meetings_serverMatch4.0-

ciscowebex_meetings_serverMatch4.0maintenance_release1

ciscowebex_meetings_serverMatch4.0maintenance_release2

ciscowebex_meetings_serverMatch4.0maintenance_release3

ciscowebex_meetings_serverMatch4.0maintenance_release3_security_patch3

ciscowebex_meetings_serverMatch4.0maintenance_release3_security_patch4

VendorProductVersionCPE
ciscowebex_meetings_online41.3.5cpe:2.3:a:cisco:webex_meetings_online:41.3.5:*:*:*:*:*:*:*
ciscowebex_meetings_server*cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*
ciscowebex_meetings_server3.0cpe:2.3:a:cisco:webex_meetings_server:3.0:-:*:*:*:*:*:*
ciscowebex_meetings_server3.0cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release1:*:*:*:*:*:*
ciscowebex_meetings_server3.0cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release2:*:*:*:*:*:*
ciscowebex_meetings_server3.0cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3:*:*:*:*:*:*
ciscowebex_meetings_server4.0cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*
ciscowebex_meetings_server4.0cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*
ciscowebex_meetings_server4.0cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*
ciscowebex_meetings_server4.0cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	webex_meetings_online	41.3.5	cpe:2.3:a:cisco:webex_meetings_online:41.3.5:::::::*
cisco	webex_meetings_server	*	cpe:2.3:a:cisco:webex_meetings_server::::::::
cisco	webex_meetings_server	3.0	cpe:2.3:a:cisco:webex_meetings_server:3.0:-::::::
cisco	webex_meetings_server	3.0	cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release1::::::
cisco	webex_meetings_server	3.0	cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release2::::::
cisco	webex_meetings_server	3.0	cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3::::::
cisco	webex_meetings_server	4.0	cpe:2.3:a:cisco:webex_meetings_server:4.0:-::::::
cisco	webex_meetings_server	4.0	cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1::::::
cisco	webex_meetings_server	4.0	cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2::::::
cisco	webex_meetings_server	4.0	cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3::::::

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "product": "Cisco WebEx Meetings Server",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-multimedia-26DpqVRO

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

AI Score

4.7

Confidence

High

EPSS

0.001

Percentile

31.7%

JSON

Related for CVE-2021-1517