Cisco Webex Network Recording Player Remote Code Execution Vulnerabilities

Vulnerability

The vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows. The software improperly validates Advanced Recording Format (ARF) and Webex Recording Format (WRF) files, allowing an attacker to craft a malicious file that triggers arbitrary code execution. Affected versions are those prior to the fixed releases provided in the Cisco security advisory [1].

Exploitation

An attacker can exploit this vulnerability by sending a user a malicious ARF or WRF file via a link or email attachment and persuading the user to open the file using the affected software. No authentication or special network access is required beyond delivering the file to the target user.

Impact

Successful exploitation allows the attacker to execute arbitrary code on the affected system, potentially gaining full control of the system, including the ability to install programs, view, change, or delete data, or create new accounts with full user rights.

Mitigation

Cisco has released free software updates to address this vulnerability [1]. Users should upgrade to the fixed versions as specified in the advisory. No workarounds are available. Customers can obtain updates through Cisco's standard support channels.