cisco-sa-20180502-war: Cisco WebEx Advanced Recording Format Remote Code Execution Vulnerability
First published: Wed May 02 2018(Updated: )
A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an unauthenticated, remote attacker to execute arbitrary code on the system of a targeted user. An attacker could exploit this vulnerability by sending the user a link or email attachment with a malicious ARF file and persuading the user to follow the link or open the file. Successful exploitation could allow the attacker to execute arbitrary code on the user’s system. The Cisco WebEx players are applications that are used to play back WebEx meeting recordings that have been recorded by an online meeting attendee. The player can be installed automatically when a user accesses a recording file that is hosted on a WebEx server. Cisco has updated affected versions of Cisco WebEx Business Suite meeting sites, Cisco WebEx Meetings sites, Cisco WebEx Meetings Server, and the Cisco WebEx ARF Player to address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180502-war
Credit: Kushal Arvind Shah Fortinet
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Webex Network Recording Player | ||
| Cisco Webex Business Suite | ||
| Cisco Webex Meetings Client | ||
| Cisco WebEx Meetings Server |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20180502-war?
The severity of cisco-sa-20180502-war is critical due to the potential for arbitrary code execution by an unauthenticated remote attacker.
How can I mitigate the risk of cisco-sa-20180502-war?
To mitigate cisco-sa-20180502-war, users should ensure that they are using the latest version of the Cisco WebEx applications and avoid opening untrusted links.
Who is affected by cisco-sa-20180502-war?
cisco-sa-20180502-war affects users of the Cisco WebEx Network Recording Player, WebEx Business Suite, WebEx Meetings Client, and WebEx Meetings Server.
What is the nature of the vulnerability in cisco-sa-20180502-war?
The vulnerability in cisco-sa-20180502-war allows an attacker to execute arbitrary code remotely without user authentication.
Is there a patch available for cisco-sa-20180502-war?
Yes, Cisco has released updates that address the cisco-sa-20180502-war vulnerability, and users should apply these updates as soon as possible.
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/weakness
- agent/author
- agent/references
- agent/severity
- agent/title
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco webex network recording player
- canonical/cisco webex business suite
- canonical/cisco webex meetings client
- canonical/cisco webex meetings server