PT-2021-1762 · Cisco · Cisco Webex Teams

Hou Jingyi · Published 2021-01-13 · Updated 2021-01-20 · CVE-2021-1242

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Cisco Webex Teams (affected versions not specified)

Description: A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The issue exists due to the software's mishandling of character rendering. An attacker could exploit this by sharing a file within the application interface, potentially allowing them to modify how the shared file name displays. This could enable the attacker to conduct phishing or spoofing attacks.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-450

Related Identifiers

BDU:2021-00462

CVE-2021-1242

Affected Products

Cisco Webex Teams

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-teams-7ZMcXG99 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00462 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1242 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1242 · Vendor Advisory
• https://t.me/cibsecurity/22130 · Telegram Post