PT-2020-1954 · Cisco · Cisco Webex Meetings Client

Hd Moore · Published 2020-03-04 · Updated 2020-05-04 · CVE-2020-3182

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco Webex Meetings Client for MacOS (affected versions not specified)

Description A vulnerability in the multicast DNS (mDNS) protocol configuration could allow an unauthenticated adjacent attacker to obtain sensitive information about the device on which the Webex client is running. The vulnerability exists because sensitive information is included in the mDNS reply. An attacker could exploit this vulnerability by doing an mDNS query for a particular service against an affected device. A successful exploit could allow the attacker to gain access to sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2020-01233

CVE-2020-3182

Affected Products

Cisco Webex Meetings Client

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-3182 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-info-disc-OHqg982 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01233 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3182 · Vendor Advisory
• https://t.me/cvenotify/1332 · Telegram Post