CVE-2021-1536

CWE-4274 documents4 sources
Severity
7.8HIGH
EPSS
0.1%
top 79.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Cisco Webex TeamsCisco Webex Meetings ServerCisco Webex Teams
Timeline
PublishedJun 4
Latest updateMay 24

Description

A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:LExploitability: 1.3 | Impact: 3.4

Affected Packages3 packages

▶NVDcisco/webex_teams3.0.15485.0

🔴Vulnerability Details

2
GHSA
GHSA-hwgc-9p3v-8ffx: A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Ci↗2022-05-24
▶
CVEList
Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability↗2021-06-04
▶

📋Vendor Advisories

1
Cisco
Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability↗2021-06-02
▶
CVE-2021-1536 (HIGH CVSS 7.8) | A vulnerability in Cisco Webex Meet | cvebase.io