Cisco WebEx Meetings Multiple Vulnerabilities

Last Update Date: 13 Aug 2020 10:21 Release Date: 13 Aug 2020 5747 Views

RISK: Medium Risk

TYPE: Clients - Im, Chat & Voip

Multiple vulnerabilities were identified in Cisco Webex Meetings and Cisco Webex Meetings Server, a remote user could exploit some of these vulnerabilities to trigger remote code execution and disclose sensitive information on the targeted system.

Impact

Remote Code Execution
Information Disclosure

System / Technologies affected

Versions:

Cisco Webex Meetings Desktop App and Cisco Webex Meetings Client versions prior to 39.5.12
Cisco Webex Meetings Desktop App for Windows versions prior to 40.4.12 and 40.6.0

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-client-url-fcmpdfVY
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-client-mac-X7vp65BL
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-client-NBmqM9vt

Vulnerability Identifier

Source

Cisco Security Advisories