Zero-Click Wormable RCE Vulnerability in Cisco Jabber Gets Fixed, Again

🗓️ 10 Dec 2020 16:09:42Reported by Tom SpringType

threatpost

threatpost🔗 threatpost.com👁 72 Views

Critical Wormable RCE Vulnerability in Cisco Jabber Patche

Reporter	Title	Published	Views	Family All 61
ATTACKERKB	CVE-2020-27133	10 Dec 202016:00	–	attackerkb
ATTACKERKB	CVE-2020-27134	10 Dec 202016:00	–	attackerkb
ATTACKERKB	CVE-2020-27127	10 Dec 202016:00	–	attackerkb
ATTACKERKB	CVE-2020-27132	10 Dec 202016:00	–	attackerkb
BDU FSTEC	The vulnerability of the Cisco Jabber software platform for Windows lies in the insufficient neutralization of special elements used in operating system commands, allowing a hacker to execute arbitrary code.	13 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Jabber software platform for Windows, related to lack of access control, allows a intruder to gain unauthorized access to protected information.	13 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in the lack of security measures for website structures, allowing attackers to execute cross-site scripting attacks.	13 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in memory object processing errors, which allow an attacker to gain unauthorized access to protected information.	13 Jan 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco Jabber for Windows and Cisco Jabber for MacOS lies in the insufficient protection of SQL query structures, allowing attackers to execute arbitrary SQL queries.	13 Jan 202100:00	–	bdu_fstec
Circl	CVE-2020-27127	11 Dec 202020:35	–	circl

Source	Link
threatpost	www.threatpost.com/attackers-can-exploit-critical-cisco-jabber-flaw-with-one-message/158942/
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO
threatpost	www.threatpost.com/attackers-can-exploit-critical-cisco-jabber-flaw-with-one-message/158942/
watchcom	www.watchcom.no/nyheter/nyhetsarkiv/cisco-jabber-vulnerabilities-resurface/
threatpost	www.threatpost.com/webinars/whats-next-for-ransomware/
tools	www.tools.cisco.com/security/center/publicationListing.x
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-ZktzjpgO
threatpost	www.threatpost.com/webinars/whats-next-for-ransomware/
threatpost	www.threatpost.com/webinars/whats-next-for-ransomware/

10 Dec 2020 16:09Current

0.1Low risk

Vulners AI Score0.1

EPSS0.02517

cisco jabber vulnerability wormable rce patch cross-site scripting remote attackers exploitation