Unusual Remote Execution Bug in Cisco WebEx Discovered by Researchers

guest · Oct 25, 2018

Unusual Remote Execution Bug in Cisco WebEx Discovered by Researchers
October 25, 2018
https://www.bleepingcomputer.com/ne...bug-in-cisco-webex-discovered-by-researchers/

While remote code execution vulnerabilities are pretty common, a new one discovered in Cisco's WebEx online and video collaboration software is definitely different. That is because users can remotely execute commands through a component of the WebEx client even when WebEx does not listen for remote connections.

This new remote code execution vulnerability was disclosed yesterday by Ron Bowes and Jeff McJunkin of the hack challenge organization Counter Hack while performing a recent pentest.
[...] noticed that Cisco WebEx uses a service called "WebexService" that could be started and stopped by anyone and ran under System privileges. [...]
Here comes the remote code execution ...
According to the researchers even though they knew about this vulnerability, they had not realized they could use it remotely until a week had passed. [...]

This bug has since been fixed by Cisco and new WebEx updates have been released. [...] WebExec security disclosure.
Click to expand...

guest · Nov 28, 2018

Cisco Webex flaw patched
November 27, 2018
https://www.scmagazine.com/home/security-news/cisco-webex-flaw-patched/

SecureAuth today reported on a vulnerability it found in a recent Cisco Webex Meetings update that if left unpatched could lead to a code execution.

The original issue, CVE-2018-15442, affects Webex Meetings desktop app version 33.6.2.16 does not properly validate user-supplied parameters allowing an unprivileged local attacker to exploit this vulnerability by invoking the update service command with a specially crafted argument.
[...] The initial flaw was patched by Cisco, but a SecureAuth researcher found a way to bypass the fix.

SecureAuth notified Cisco of the problem on Nov. 9 and received an immediate reply with Cisco stating it was already working on a fix which has since been released.
Click to expand...

https://webexec.org/#timeline

2018-11-08 Reported a bypass to the vendor, with sample exploit code

2018-11-09 Vendor informed us that several others had reported the bypass already, and that they have a fix in the works

2018-11-27 Vendor released their new advisory - see "Redux" at the bottom

Click to expand...

guest · Feb 27, 2019

New Elevation of Privilege Vulnerability Found in Cisco WebEx Meetings
February 27, 2019
https://www.bleepingcomputer.com/ne...-vulnerability-found-in-cisco-webex-meetings/

A vulnerability found in the update service of the Cisco Webex Meetings Desktop App for Windows could allow an unprivileged local attacker to elevate privileges and run arbitrary commands using the SYSTEM user privileges.

This vulnerability affects all Cisco Webex Meetings Desktop App releases between 33.6.4.15 and 33.8.2.7, with prior versions probably being affected by this security issue too, but they were not checked.
The CVE-2019-1674 vulnerability stems from the inability of the Cisco Webex Meetings Desktop App's update service to "properly validate version numbers of new files. So, an unprivileged local attacker could exploit this vulnerability by invoking the update service command with a crafted argument and folder."

This is not the first time security researchers have found vulnerabilities in Cisco's WebEx online video collaboration software but the one discovered by Counter Hack's Ron Bowes and Jeff McJunkin on October 24, 2018, really stands out.
Click to expand...

guest · Mar 30, 2019

Critical RCE Bug in Cisco WebEx Browser Extensions Faces ‘Ongoing Exploitation’
Users of the conferencing platform should update immediately
March 29, 2019
https://threatpost.com/cisco-webex-browser-bug/143285/

A critical vulnerability in Cisco WebEx browser extensions that could allow unauthenticated remote code-execution (RCE) on targeted machines is being actively exploited in the wild.

In exploiting this latest bug, attackers could execute arbitrary code with the privileges of the affected browser on Windows PCs that have specific browser extensions installed. The vulnerable extensions are for Cisco WebEx Meetings Server and Cisco WebEx Centers (Meeting Center, Event Center, Training Center and Support Center), according to an advisory.
“The vulnerability is due to a design defect in an application programing interface (API) response parser within the plugin,” Cisco said in the alert, issued Thursday.

The issue (CVE-2017-3823) can be easily exploited as well: An attacker needs only to convince an affected user to visit a booby-trapped web page or follow an attacker-supplied link with an affected browser. It appears that’s what’s happening now, according to the advisory.
Click to expand...

guest · Jan 10, 2020

Cisco Webex Bug Allows Remote Code Execution
January 10, 2020
https://threatpost.com/cisco-webex-bug-allows-remote-code-execution/151724/

Cisco Systems has fixed two high-severity vulnerabilities in its products, including one in its popular Webex video conferencing platform that could enable a remote attacker to execute commands.

The high-severity Webex flaw exists in the web-based management interface of Cisco Webex Video Mesh, a feature that enables on-premises infrastructure for video conferencing, to enhance audio, video and content.

“A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with root privileges on a targeted node,” according to Cisco’s security advisory, released this week.
The vulnerability affects Cisco Webex Video Mesh Software releases earlier than 2019.09.19.1956m (the fixed version).
The flaw, found during internal security testing, has a CVSS score of 7.2 out of 10, making it high-severity. Cisco said that it is not aware of any exploits against the flaw in the wild.
Click to expand...

guest · Mar 4, 2020

Cisco Patches Remote Code Execution Flaws in Webex Player
March 4, 2020
https://www.securityweek.com/cisco-patches-remote-code-execution-flaws-webex-player

Tracked as CVE-2020-3127 and CVE-2020-3128 and rated high severity (CVSS score 7.8), the issues reside in the insufficient validation of elements within a Webex recording stored as ARF (Advanced Recording Format) or WRF (Webex Recording Format).

To exploit the bugs, an attacker needs to send a malicious ARF or WRF file and trick the victim into opening the file the local system, which could result in arbitrary code being executed with the privileges of the targeted user.
Cisco says there are no workarounds to mitigate these flaws, but security updates to address them have been released. The company is not aware of exploitation attempts targeting the bugs.
Click to expand...

guest · Jun 17, 2020

Cisco fixes severe flaws in Webex Meetings for Windows, macOS
June 17, 2020
https://www.bleepingcomputer.com/ne...re-flaws-in-webex-meetings-for-windows-macos/

Cisco today released security updates to address two high severity vulnerabilities found in the Cisco Webex Meetings Desktop App for Windows and macOS that could allow unprivileged attackers to run programs and code on vulnerable machines.

The two vulnerabilities are tracked as CVE-2020-3263 and CVE-2020-3342, and they affect Cisco Webex Meetings Desktop App releases earlier than 39.5.12 and lockdown versions of Cisco Webex Meetings Desktop App for Mac earlier than 39.5.11, respectively.
Remotely execute programs on Windows systems
CVE-2020-3263 could enable unauthenticated, remote attackers to execute programs on systems running an unpatched Cisco Webex Meetings Desktop App release. An attacker can exploit this vulnerability by tricking the target to click on a malicious URL.
Click to expand...

Execute arbitrary code remotely on Macs
The remote code execution vulnerability found in the macOS client is due to improper certificate validation on software update files downloaded by affected Cisco Webex Meetings Desktop App for Mac releases.

CVE-2020-3342 could make it possible for unauthenticated attackers to remotely execute arbitrary code with the privileges of the user logged on Macs running unpatched versions of Cisco Webex Meetings Desktop App for Mac.
Click to expand...

Log in or Sign up

Unusual Remote Execution Bug in Cisco WebEx Discovered by Researchers

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Log in or Sign up

Unusual Remote Execution Bug in Cisco WebEx Discovered by Researchers

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

guest Guest

Useful Searches