PT-2018-8805 · Cisco · Cisco Webex Teams

Published 2018-07-18 · Updated 2022-04-18 · CVE-2018-0387

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Webex Teams (affected versions not specified)

Description A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges. The issue occurs due to improper input sanitization. An attacker could exploit this by sending a user a malicious link and persuading the user to follow the link, potentially allowing the attacker to execute arbitrary code on the user's system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-0387

Affected Products

Cisco Webex Teams

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-0387 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180718-webex-teams-rce · Vendor Advisory
• http://securityfocus.com/bid/104873 · Note