Cisco Webex Meetings Desktop App for Windows Shared Memory Information Disclosure Vulnerability

Vulnerability

The vulnerability resides in the shared memory mechanism used by Cisco Webex Meetings Desktop App for Windows. The software stores sensitive information in shared memory without adequate protection. Affected versions include those prior to the fixed releases: Cisco Webex Meetings Desktop App for Windows versions 40.4.12 and earlier, as detailed in the advisory [1]. The vulnerability is due to unsafe usage of shared memory.

Exploitation

An attacker must have authenticated local access to the Windows system and have permissions to view system memory. The attacker can run a custom application designed to read the shared memory region used by Webex Meetings. No user interaction beyond the attacker's own actions is required. The attacker can then extract the data from shared memory [1].

Impact

Successful exploitation allows the attacker to retrieve sensitive information from shared memory, including usernames, meeting information, and authentication tokens. This information could be used to aid in further attacks, such as impersonating the user or accessing meeting content. The impact is information disclosure with potential for privilege escalation or lateral movement [1].

Mitigation

Cisco has released fixed versions of the Cisco Webex Meetings Desktop App for Windows. The advisory [1] lists the fixed releases, for example version 40.4.12 and later. Users should update to the latest version. No workarounds are mentioned. The vulnerability is not listed on the KEV catalog as of the publication date.