cnvd - cnvd-2019-05905

cnvd-2019-05905

Vulnerability from cnvd

Title: Cisco Webex Meetings Desktop App和Cisco Webex Productivity Tools操作系统命令注入漏洞

Description:

Cisco Webex Meetings Desktop App和Cisco Webex Productivity Tools都是美国思科（Cisco）公司的产品。Cisco Webex Meetings Desktop App是一款使用在桌面环境上的视频会议控制应用程序。Cisco Webex Productivity Tools是一款视频会议调度工具。

基于Windows平台的Cisco Webex Meetings Desktop App 33.6.6之前版本和Cisco Webex Productivity Tools 32.6.0版本至33.0.7之前版本中的更新服务存在操作系统命令注入漏洞，该漏洞源于程序未能充分地验证用户提交的参数。本地攻击者可借助特制的参数调用更新服务命令利用该漏洞以SYSTEM用户权限运行任意命令。

Severity: 高

Patch Name: Cisco Webex Meetings Desktop App和Cisco Webex Productivity Tools操作系统命令注入漏洞的补丁

Patch Description:

Formal description:

厂商已发布漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj

Reference: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj

Impacted products

Name
['Cisco WebEx Meetings <33.6.6', 'Cisco WebEx Productivity Tools >32.6.0 (<33.0.7)']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "107184"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-1674"
    }
  },
  "description": "Cisco Webex Meetings Desktop App\u548cCisco Webex Productivity Tools\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Webex Meetings Desktop App\u662f\u4e00\u6b3e\u4f7f\u7528\u5728\u684c\u9762\u73af\u5883\u4e0a\u7684\u89c6\u9891\u4f1a\u8bae\u63a7\u5236\u5e94\u7528\u7a0b\u5e8f\u3002Cisco Webex Productivity Tools\u662f\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u8c03\u5ea6\u5de5\u5177\u3002\n\n\u57fa\u4e8eWindows\u5e73\u53f0\u7684Cisco Webex Meetings Desktop App 33.6.6\u4e4b\u524d\u7248\u672c\u548cCisco Webex Productivity Tools 32.6.0\u7248\u672c\u81f333.0.7\u4e4b\u524d\u7248\u672c\u4e2d\u7684\u66f4\u65b0\u670d\u52a1\u5b58\u5728\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u5730\u9a8c\u8bc1\u7528\u6237\u63d0\u4ea4\u7684\u53c2\u6570\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u53c2\u6570\u8c03\u7528\u66f4\u65b0\u670d\u52a1\u547d\u4ee4\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5SYSTEM\u7528\u6237\u6743\u9650\u8fd0\u884c\u4efb\u610f\u547d\u4ee4\u3002",
  "discovererName": "Marcos Accossatto from SecureAuth",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-05905",
  "openTime": "2019-03-02",
  "patchDescription": "Cisco Webex Meetings Desktop App\u548cCisco Webex Productivity Tools\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Webex Meetings Desktop App\u662f\u4e00\u6b3e\u4f7f\u7528\u5728\u684c\u9762\u73af\u5883\u4e0a\u7684\u89c6\u9891\u4f1a\u8bae\u63a7\u5236\u5e94\u7528\u7a0b\u5e8f\u3002Cisco Webex Productivity Tools\u662f\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u8c03\u5ea6\u5de5\u5177\u3002\r\n\r\n\u57fa\u4e8eWindows\u5e73\u53f0\u7684Cisco Webex Meetings Desktop App 33.6.6\u4e4b\u524d\u7248\u672c\u548cCisco Webex Productivity Tools 32.6.0\u7248\u672c\u81f333.0.7\u4e4b\u524d\u7248\u672c\u4e2d\u7684\u66f4\u65b0\u670d\u52a1\u5b58\u5728\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u5730\u9a8c\u8bc1\u7528\u6237\u63d0\u4ea4\u7684\u53c2\u6570\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u53c2\u6570\u8c03\u7528\u66f4\u65b0\u670d\u52a1\u547d\u4ee4\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5SYSTEM\u7528\u6237\u6743\u9650\u8fd0\u884c\u4efb\u610f\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Webex Meetings Desktop App\u548cCisco Webex Productivity Tools\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco WebEx Meetings \u003c33.6.6",
      "Cisco WebEx Productivity Tools \u003e32.6.0 (\u003c33.0.7)"
    ]
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj",
  "serverity": "\u9ad8",
  "submitTime": "2019-02-28",
  "title": "Cisco Webex Meetings Desktop App\u548cCisco Webex Productivity Tools\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2019-1674 (GCVE-0-2019-1674)

Vulnerability from cvelistv5

Published

2019-02-28 18:00

Modified

2024-11-20 17:27

Severity ?

7.8 (High) - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78

Summary

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/107184	vdb-entry, x_refsource_BID
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj	vendor-advisory, x_refsource_CISCO
	https://www.exploit-db.com/exploits/46479/	exploit, x_refsource_EXPLOIT-DB

Impacted products

Vendor

Product

Version

▼

Cisco

Cisco Webex Meetings Desktop App

Version: unspecified < 33.6.6
Version: unspecified < 33.9.1

Cisco

Cisco Webex Productivity Tools

Version: unspecified < 33.0.7

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:20:28.398Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "107184",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107184"
          },
          {
            "name": "20190227 Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj"
          },
          {
            "name": "46479",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/46479/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-1674",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-20T16:55:56.691471Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T17:27:41.724Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Webex Meetings Desktop App",
          "vendor": "Cisco",
          "versions": [
            {
              "lessThan": "33.6.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "33.9.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Cisco Webex Productivity Tools",
          "vendor": "Cisco",
          "versions": [
            {
              "lessThan": "33.0.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2019-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-05T10:57:02",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "107184",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107184"
        },
        {
          "name": "20190227 Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj"
        },
        {
          "name": "46479",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/46479/"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20190227-wmda-cmdinj",
        "defect": [
          [
            "CSCvn55874"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2019-02-27T16:00:00-0800",
          "ID": "CVE-2019-1674",
          "STATE": "PUBLIC",
          "TITLE": "Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Webex Meetings Desktop App",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "33.6.6"
                          },
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "33.9.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Cisco Webex Productivity Tools",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "33.0.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "7.8",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-78"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "107184",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107184"
            },
            {
              "name": "20190227 Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj"
            },
            {
              "name": "46479",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/46479/"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20190227-wmda-cmdinj",
          "defect": [
            [
              "CSCvn55874"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2019-1674",
    "datePublished": "2019-02-28T18:00:00Z",
    "dateReserved": "2018-12-06T00:00:00",
    "dateUpdated": "2024-11-20T17:27:41.724Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted