PT-2018-2053 · Cisco · Cisco Webex Meetings Desktop App+1

Jeff Mcjunkin · Published 2018-10-24 · Updated 2019-10-09 · CVE-2018-15442

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Desktop App for Windows (affected versions not specified) Cisco Webex Productivity Tools for Windows (affected versions not specified)

Description A vulnerability in the update service could allow an authenticated, local attacker to execute arbitrary commands as a privileged user due to insufficient validation of user-supplied parameters. The vulnerability can be exploited by invoking the update service command with a crafted argument, potentially allowing the attacker to run arbitrary commands with SYSTEM user privileges. In Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools.

Recommendations For Cisco Webex Meetings Desktop App for Windows, consider disabling the update service until a patch is available to prevent exploitation. For Cisco Webex Productivity Tools for Windows, restrict access to the update service to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2019-00003

CVE-2018-15442

Affected Products

Cisco Webex Meetings Desktop App

Cisco Webex Productivity Tools

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/webexec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/webexec.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/smb/webexec_command.rb · Exploit
• 🔥 https://exploit-db.com/exploits/45695 · Exploit
• 🔥 https://exploit-db.com/exploits/45696 · Exploit
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181024-webex-injection · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15442 · Security Note
• https://bdu.fstec.ru/vul/2019-00003 · Security Note
• https://osv.dev/vulnerability/CVE-2018-15442 · Vendor Advisory
• http://securityfocus.com/bid/105734 · Note
• http://securitytracker.com/id/1041942 · Note