CVE-2018-0287 — Improper Input Validation in Cisco Webex Meetings Online

CWE-20 — Improper Input Validation4 documents4 sources
Severity
8.8HIGHNVD
EPSS
2.0%
top 16.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Webex Meetings Online
Timeline
PublishedMay 2
Latest updateMay 13

Description

A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability is due to a design flaw in the affected software. An attacker could exploit this vulnerability by sending a user an email attachment or link to a malicious ARF file and persuading the user to open the file or follow the link. A successful exploit could allow the attacker to execute …

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDcisco/webex_meetings_onlinet30, t32.7+1

🔴Vulnerability Details

2
GHSA
GHSA-fvhg-rv29-6639: A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker↗2022-05-13
▶
CVEList
CVE-2018-0287: A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker↗2018-05-02
▶

📋Vendor Advisories

1
Cisco
Cisco WebEx Advanced Recording Format Player Remote Code Execution Vulnerability↗2018-05-02
▶
CVE-2018-0287 — Improper Input Validation in Cisco | cvebase