CVE-2020-3347
Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. The vulnerability is due to unsafe usage of shared memory that is used by the affected software. An attacker with permissions to view system memory could exploit this vulnerability by running an application on the local system that is designed to read shared memory. A successful exploit could allow the attacker to retrieve sensitive information from the shared memory, including usernames, meeting information, or authentication tokens that could aid the attacker in future attacks.
Una vulnerabilidad en Cisco Webex Meetings Desktop App para Windows, podría permitir a un atacante local autenticado conseguir acceso a información confidencial sobre un sistema afectado. La vulnerabilidad es debido al uso no seguro de la memoria compartida que es usada por el software afectado. Un atacante con permisos para visualizar la memoria del sistema podría explotar esta vulnerabilidad mediante una ejecución de una aplicación en el sistema local que es diseñada para leer memoria compartida. Una explotación con éxito podría permitir a un atacante recuperar información confidencial de la memoria compartida, incluyendo nombres de usuario, información de reuniones o tokens de autenticación que podrían ayudar al atacante en nuevos ataques
CVSS Scores
SSVC
- Decision:-
Timeline
- 2019-12-12 CVE Reserved
- 2020-06-18 CVE Published
- 2023-03-08 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Webex Meetings Search vendor "Cisco" for product "Webex Meetings" | < 40.4.12 Search vendor "Cisco" for product "Webex Meetings" and version " < 40.4.12" | desktop, windows |
Affected
| ||||||
Cisco Search vendor "Cisco" | Webex Meetings Search vendor "Cisco" for product "Webex Meetings" | 40.6.0 Search vendor "Cisco" for product "Webex Meetings" and version "40.6.0" | desktop, windows |
Affected
|