Cisco Webex Meetings Desktop App URL Filtering Arbitrary Program Execution Vulnerability

Vulnerability

The vulnerability is in the URL handling of Cisco Webex Meetings Desktop App (and potentially Webex Meetings Client). Improper validation of input supplied to application URLs allows an attacker to cause the app to execute other programs already present on the system. Affected versions include those prior to the fixed releases detailed in the Cisco advisory [1].

Exploitation

An unauthenticated, remote attacker can exploit this by persuading a user to click a specially crafted URL. No authentication is required; the attacker only needs to deliver the link via email, messaging, or other means. User interaction is required (clicking the link). The attacker does not need network access beyond being able to send the link.

Impact

Successful exploitation allows the attacker to execute arbitrary programs already present on the end-user system. If the attacker can also plant malicious files on the system or on an accessible network file path, they could achieve arbitrary code execution. The impact is high, potentially leading to full compromise of the affected system.

Mitigation

Cisco has released free software updates to address this vulnerability. Users should upgrade to the fixed versions as indicated in the Cisco Security Advisory [1]. No workarounds are mentioned. The vulnerability is not listed on the CISA KEV as of the publication date.