High-Severity Cisco Webex Flaws Fixed

🗓️ 05 Mar 2020 15:11:11Reported by Lindsey O'DonnellType

threatpost

threatpost🔗 threatpost.com👁 242 Views

Cisco patches high-severity Webex flaws allowing code execution through ARF and WRF files

Reporter	Title	Published	Views	Family All 187
0day.today	Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit	24 Mar 202100:00	–	zdt
ATTACKERKB	CVE-2020-24407	15 Oct 202023:00	–	attackerkb
BDU FSTEC	The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data, allowing a perpetrator to execute arbitrary code.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco Webex Network Recording Player and Cisco Webex Player for Windows operating systems arises from insufficient validation of input data, allowing a malicious actor to execute arbitrary code.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the implementation of the SSL protocol within the functions of Cisco Intelligent Proximity software for web conference solutions such as Cisco Webex Meetings, Cisco Webex Teams, Cisco Meeting App, and Cisco Jabber allows attackers to gain access to confidential data and compromise its integrity.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Prime Network Registrar management tool allows a hacker to perform cross-site forgery of requests.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of measures to protect SQL query structures. This allows attackers to execute arbitrary SQL queries against the database in the target system and gain access to protected information.	12 Nov 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores lies in the lack of restrictions on file uploads, which allows attackers to execute arbitrary code.	17 Nov 202000:00	–	bdu_fstec
Circl	CVE-2020-24400	15 Oct 202023:29	–	circl
Circl	CVE-2020-24407	15 Oct 202023:29	–	circl

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3127
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3128
threatpost	www.threatpost.com/newsletter-sign/
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200304-webex-player
media	www.media.threatpost.com/wp-content/uploads/sites/103/2020/03/05093159/Screen-Shot-2020-03-05-at-9.05.50-AM.png
threatpost	www.threatpost.com/cisco-webex-flaw-lets-unauthenticated-users-join-private-online-meetings/152191/
threatpost	www.threatpost.com/cisco-webex-bug-allows-remote-code-execution/151724/
tools	www.tools.cisco.com/security/center/publicationListing.x
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-proximity-ssl-cert-gBBu3RB
attendee	www.attendee.gotowebinar.com/register/3191336203359293954

05 Mar 2020 15:11Current

0.8Low risk

Vulners AI Score0.8

EPSS0.0552

cisco systems webex vulnerabilities arf files wrf files code execution cve-2020-3127 cve-2020-3128 windows os multimedia players network recording player webex player cisco advisory