Privilege escalation in Cisco WebEx Room

1) Buffer overflow

EUVDB-ID: #VU13416

Risk: Low

CVSSv3.1: 6.1 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2018-6242

CWE-ID: CWE-120 - Buffer overflow

Exploit availability: Yes

Description

The vulnerability allows a physical attacker to gain elevated privileges on the target system.

The vulnerability exists due to a buffer overflow vulnerability in NVIDIA TX1 BootROM when Recovery Mode (RCM) is active. A physical attacker can bypass secure boot and execute unverified code with elevated privileges.

Mitigation

Update to version 9.2.6, 9.3.2.

Vulnerable software versions

Cisco WebEx Room Kit PLus: before 9.3.2

Cisco WebEx Room Kit: before 9.3.2

Cisco WebEx Room 70: before 9.3.2

Cisco WebEx Room 55: before 9.3.2

External links

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nvidia-tx1-r...

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.