CVE-2021-1536 — Uncontrolled Search Path Element

Vendor	Product	Version range	Fixed in
cisco	cisco_webex_teams	—	—
cisco	webex_meetings_server	—	—
cisco	webex_meetings_webex_network_recording_player_and_webex_teams_dll	—	—
cisco	webex_teams	—	—

Cisco

Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability

vendor_cisco·2021-06-02·CVSS 4.8

CVE-2021-1536 [MEDIUM] CWE-427 Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path in the system, which can cause a malicious DLL file to be loaded when the application starts. A successful exploit could allow the attacker to exec

Cisco

Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability

vendor_cisco·CVSS 3.1

CVE-2021-1536 Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability CVE-2021-1536: Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path in the system, which can cause a malicious DLL file to be loaded when the application starts. A successful exploit could allow the att

GHSA

GHSA-hwgc-9p3v-8ffx: A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Ci

ghsa_unreviewed·2022-05-24

CVE-2021-1536 [HIGH] CWE-427 GHSA-hwgc-9p3v-8ffx: A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Ci A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path in the system, which can cause a malicious DLL file to be loaded when the application starts. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of another user account.

CVE-2021-1536: A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex…

Affected

CVSS provenance