Main
Vulnerability Database
Exploits
ID:1515 - Exploit for Command injection in Cisco Webex Meetings Desktop App - CVE-2018-15442
ID:1515 - Exploit for Command injection in Cisco Webex Meetings Desktop App - CVE-2018-15442
Published: March 18, 2020
Vulnerability identifier: #VU15525
Vulnerability risk: Low
CVE-ID: CVE-2018-15442
CWE-ID: CWE-77
Exploitation vector: Local access
Vulnerable software:
Cisco Webex Meetings Desktop App
Cisco Webex Meetings Desktop App
Link to public exploit:
Vulnerability description
The vulnerability allows a local attacker to execute arbitrary commands on the target system.
The vulnerability exists in the update service of Cisco Webex Meetings Desktop App due to insufficient validation of user-supplied parameters. A local attacker can invoke the update service command with a crafted argument and run arbitrary commands with SYSTEM user privileges.
Remediation
Update to version 33.6.4.