CVE-2018-0387: cisco webex_teams Improper Input Validation

Vulnerability summary

CVE-2018-0387 is a high (CVSS 9.3) Improper Input Validation vulnerability in cisco webex_teams. EPSS estimates a 3.11% chance of exploitation in the next 30 days, higher than 87.5% of scored vulnerabilities.

Timeline

1. 18-07-2018
   PublishedVulnerability first disclosed.
2. 29-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on the user's device, possibly with elevated privileges. The vulnerability occurs because Cisco Webex Teams does not properly sanitize input. An attacker could exploit the vulnerability by sending a user a malicious link and persuading the user to follow the link. A successful exploit could allow the attacker to execute arbitrary code on the user's system. Cisco Bug IDs: CSCvh66250.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.