CVE-2016-1482
published 2016-09-17CVE-2016-1482: Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID…
PriorityP355high8.1CVSS 3.0
AVNACHPRNUINSUCHIHAH
EPSS
4.03%
89.5th percentile
Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | webex_meetings_server | — | — |
| cisco | webex_meetings_server | — | — |
CVSS provenance
nvdv3.08.1HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_cisco9.3CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco WebEx Meetings Server Remote Command Execution Vulnerability
vendor_cisco·2016-09-14·CVSS 9.3
CVE-2016-1482 [CRITICAL] CWE-78 Cisco WebEx Meetings Server Remote Command Execution Vulnerability
Cisco WebEx Meetings Server Remote Command Execution Vulnerability
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to bypass security restrictions on a host located in a DMZ and inject arbitrary commands on a targeted system.
The vulnerability is due to insufficient sanitization of user-supplied data processed by the affected software. An attacker could exploit this vulnerability by injecting arbitrary commands into existing application scripts running on a targeted device located in a DMZ. Successful exploitation could allow an attacker to execute arbitrary commands on the device with elevated privileges.
Cisco has released software updates that address this vulnerability. Workarounds that mitigate this vulnerability are not available.
Th
Cisco
Cisco WebEx Meetings Server Remote Command Execution Vulnerability
vendor_cisco
CVE-2016-1482 Cisco WebEx Meetings Server Remote Command Execution Vulnerability
CVE-2016-1482: Cisco WebEx Meetings Server Remote Command Execution Vulnerability
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to bypass security restrictions on a host located in a DMZ and inject arbitrary commands on a targeted system. The vulnerability is due to insufficient sanitization of user-supplied data processed by the affected software. An attacker could exploit this vulnerability by injecting arbitrary commands into existing application scripts running on a targeted device located in a DMZ. Successful exploitation could allow an attacker to execute arbitrary commands on the device with elevated privileges. Cisco has released software updates that address this vulnerability.
CWE: CWE-78, CWE-78
Bug IDs: CSCuy83130
GHSA
GHSA-x68f-g332-gq2x: Cisco WebEx Meetings Server 2
ghsa_unreviewed·2022-05-17
CVE-2016-1482 [HIGH] CWE-78 GHSA-x68f-g332-gq2x: Cisco WebEx Meetings Server 2
Cisco WebEx Meetings Server 2.6 allows remote attackers to execute arbitrary commands by injecting these commands into an application script, aka Bug ID CSCuy83130.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wemhttp://www.securityfocus.com/bid/92959http://www.securitytracker.com/id/1036809http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160914-wemhttp://www.securityfocus.com/bid/92959http://www.securitytracker.com/id/1036809
2016-09-17
Published