VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Feb 17, 2021· Updated Jun 17, 2026

CVE-2021-1372

CVE-2021-1372

Description

A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An attacker with permissions to view system memory could exploit this vulnerability by running an application on the local system that is designed to read shared memory. A successful exploit could allow the attacker to retrieve sensitive information from the shared memory, including usernames, meeting information, or authentication tokens. Note: To exploit this vulnerability, an attacker must have valid credentials on a Microsoft Windows end-user system and must log in after another user has already authenticated with Webex on the same end-user system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Cisco Systems, Inc./Webex Meetings2 versions
    cpe:2.3:a:cisco:webex_meetings:*:*:*:*:latest_channel:*:*:*+ 1 more
    • cpe:2.3:a:cisco:webex_meetings:*:*:*:*:latest_channel:*:*:*range: <40.10
    • cpe:2.3:a:cisco:webex_meetings:*:*:*:*:slow_channel:*:*:*range: <40.6
  • Cisco Systems, Inc./Webex Meetings Server6 versions
    cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*range: <4.0
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3:*:*:*:*:*:*
    • cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3_security_patch3:*:*:*:*:*:*
  • Cisco Systems, Inc./Webex Meetings Desktop Appllm-fuzzy
  • Cisco Systems, Inc./Webex Productivity Toolsllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: n/a

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.