Cisco Webex, Router Bugs Allow Code Execution

Cisco is warning of three high-severity flaws in its popular Webex web conferencing app, including one that could allow an unauthenticated attacker to remotely execute code on impacted systems. Beyond Webex, the networking giant on Wednesday also patched a slew of bugs across several products,...

CVE-2020-3347

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

Input validation

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could exploit this vulnerability by...

Memory corruption

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

CVE-2020-3263 Cisco Webex Meetings Desktop App URL Filtering Arbitrary Program Execution Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could exploit this vulnerability by...

CVE-2020-3263

The CVE-2020-3263 entry concerns Cisco Webex Meetings Desktop App. Affected component: the client’s URL handling where input is not properly validated. Root cause: improper validation of input supplied to application URLs. Impact: could allow an unauthenticated, remote attacker to persuade a user...

CVE-2020-3263 Cisco Webex Meetings Desktop App URL Filtering Arbitrary Program Execution Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could exploit this vulnerability by...

CVE-2020-3342

CVE-2020-3342 is a code-execution vulnerability in Cisco Webex Meetings Desktop App for Mac related to the update feature. The issue stems from improper validation of cryptographic protections on files downloaded during an update, allowing an unauthenticated, remote attacker to persuade a user to...

CVE-2020-3263: Improper Input Validation

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could exploit this vulnerability by...

Cisco Webex Meetings Desktop App Trust Management Issue Vulnerability

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. A trust management issue vulnerability exists in the software update feature in the Cisco Webex Meetings Desktop App prior to version 39.5.11 Mac, which arises from the...

CVE-2020-3342: Improper Certificate Validation

A vulnerability in the software update feature of Cisco Webex Meetings Desktop App for Mac could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability is due to improper validation of cryptographic protections on files that are downloaded by...

CVE-2020-3347: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions...

Cisco Webex Meetings Desktop App Information Disclosure Vulnerability

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. An information disclosure vulnerability exists in Cisco Webex Meetings Desktop App prior to version 40.6.0 for Windows-based platforms, which stems from the program failing...

Cisco Webex Meetings Desktop App and Webex Meetings Client URL Filtering Arbitrary Program Execution Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App and Cisco Webex Meetings Client could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could...

PT-2020-2959

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App for Windows affected versions not specified Description A vulnerability in the software could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The issue is d...

PT-2020-2939

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings and Cisco Webex Meetings Server affected versions not specified Cisco Webex Meetings Desktop App affected versions not specified Description The issue is related to improper handling of authentication tokens, which could...

PT-2020-2940

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App affected versions not specified Description The issue is related to improper validation of input supplied to application URLs, which could allow an unauthenticated, remote attacker to execute programs on an...

PT-2020-2866

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App for Mac affected versions not specified Description A vulnerability in the software update feature could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The issue is d...

CVE-2020-0919

An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'...

CVE-2020-0919: Undefined Security Weakness

An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'...