CVE-2020-3263: A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The…

high7.5CVSS 3.1

AVNACHPRNUIRSUCHIHAH

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. The vulnerability is due to improper validation of input that is supplied to application URLs. The attacker could exploit this vulnerability by persuading a user to follow a malicious URL. A successful exploit could allow the attacker to cause the application to execute other programs that are already present on the end-user system. If malicious files are planted on the system or on an accessible network file path, the attacker could execute arbitrary code on the affected system.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_webex_meetings_server	—	—
cisco	webex_meetings	< 39.5.12	39.5.12
cisco	webex_meetings_desktop_app_and_webex_meetings	—	—