PT-2018-8805 · Cisco · Cisco Webex Teams

Publicado 2018-07-18 · Atualizado 2022-04-18 · CVE-2018-0387

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Webex Teams (affected versions not specified)

Description A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges. The issue occurs due to improper input sanitization. An attacker could exploit this by sending a user a malicious link and persuading the user to follow the link, potentially allowing the attacker to execute arbitrary code on the user's system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-0387

Produtos afetados

Cisco Webex Teams

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-0387 · Nota de Segurança
• http://securityfocus.com/bid/104873 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-webex-teams-rce · Aviso do Fabricante