CVE-2018-0457
Cisco Webex Player WRF Files Denial of Service Vulnerability
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
05 Oct 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability in the Cisco Webex Player for Webex Recording Format (WRF) files could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. An attacker could exploit this vulnerability by sending a user a link or email attachment with a malicious WRF file and persuading the user to open the file in the Cisco Webex Player. A successful exploit could cause the affected player to crash, resulting in a DoS condition. For more information about this vulnerability, see the Details section of this security advisory.
Affected products
Cisco · Cisco WebEx WRF PlayerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →