CVE-2015-0589

Vulnerability

The vulnerability is a command injection flaw in the administrative web interface of Cisco WebEx Meetings Server versions 1.0, 1.1, and 1.5 [1]. It arises from improper validation of user-supplied input. An authenticated remote attacker can inject arbitrary operating system commands into affected fields.

Exploitation

An attacker must have valid administrative credentials to access the web interface. No additional privileges or user interaction are required. The attacker crafts malicious input into the vulnerable fields, which are then executed by the system with root privileges [1].

Impact

Successful exploitation allows the attacker to execute arbitrary OS commands with root privileges on the affected Cisco WebEx Meetings Server and on devices managed by it. This results in full compromise of the server and potential lateral movement to managed devices [1].

Mitigation

Cisco has released software updates to address this vulnerability. Affected versions are 1.0, 1.1, and 1.5; fixed versions include 2.0 and later. No workarounds are available. The advisory is available at the Cisco Security Advisory link [1].