CVE-2017-12360: Medium severity cisco webex meetings vulnerability

Published Nov 30, 2017

Updated

A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by providing a user with a malicious WRF file via email or URL and convincing the user to open the file. A successful exploit could cause an affected player to crash, resulting in a DoS condition. This vulnerability affects Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, and Cisco WebEx WRF players. Cisco Bug IDs: CSCve30294, CSCve30301.

Affected Software

4 affected components

Cisco Webex Meeting Center=t29

Cisco Webex Meeting Center=t30

Cisco Webex Meeting Center=t31

Cisco Webex Meeting Center=t32

Event History

Nov 30, 2017

CVE Published

via MITRE·09:00 AM

Data Sourced

via MITRE·09:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this Cisco WebEx Network Recording Player vulnerability?

The vulnerability ID is CVE-2017-12360.

What is the severity of CVE-2017-12360?

The severity of CVE-2017-12360 is medium with a CVSS score of 4.3.

How does this vulnerability affect Cisco WebEx Meeting Center?

This vulnerability affects Cisco WebEx Meeting Center versions t29, t30, t31, and t32.

What is the impact of the Cisco WebEx Network Recording Player vulnerability?

The vulnerability could allow an attacker to cause a denial of service (DoS) condition.

How can the Cisco WebEx Network Recording Player vulnerability be exploited?

The vulnerability can be exploited by providing a malicious WRF file to a user via email or URL and convincing the user to open it.