Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistCiscoCVELIST:CVE-2020-3322
HistoryJun 03, 2020 - 5:00 p.m.

CVE-2020-3322 Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerability

2020-06-0317:00:18
CWE-20
cisco
www.cve.org
7

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

3.7

Confidence

High

EPSS

0.001

Percentile

22.8%

JSON

A vulnerability in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows could allow an attacker to cause a process crash resulting in a Denial of service (DoS) condition for the player application on an affected system. The vulnerability exists due to insufficient validation of certain elements with a Webex recording stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to cause the Webex player application to crash when trying to view the malicious file.

CNA Affected

[
  {
    "product": "Cisco Webex Network Recording Player",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "3.0 MR3 Security Patch 2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0 MR3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Cisco Webex Player for Microsoft Windows",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "3.0 MR3 Security Patch 2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.0 MR3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Related

cve 1
prion 1
nvd 1
cve
cve
CVE-2020-3322
2020-06-03 17:15:25
prion
prion
Input validation
2020-06-03 17:15:00
nvd
nvd
CVE-2020-3322
2020-06-03 17:15:25

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

3.7

Confidence

High

EPSS

0.001

Percentile

22.8%

JSON
Related for CVELIST:CVE-2020-3322
cve1prion1nvd1