CVE-2018-15442

{"id": "CVE-2018-15442", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2018-10-24T19:29:00.290", "references": [{"url": "http://www.securityfocus.com/bid/105734", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securitytracker.com/id/1041942", "tags": ["Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181024-webex-injection", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://www.exploit-db.com/exploits/45695/", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}, {"url": "https://www.exploit-db.com/exploits/45696/", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools."}, {"lang": "es", "value": "Una vulnerabilidad en el servicio de actualizaciones de Cisco Webex Meetings Desktop App para Windows podr\u00eda permitir que un atacante local autenticado ejecute comandos arbitrarios como usuario privilegiado. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de los par\u00e1metros introducidos por el usuario. Un atacante podr\u00eda explotar esta vulnerabilidad invocando el comando espec\u00edfico del servicio de actualizaciones con un argumento manipulado. Su explotaci\u00f3n con \u00e9xito podr\u00eda permitir que el atacante ejecute comandos arbitrarios con privilegios de usuario SYSTEM. Aunque la m\u00e9trica del vector de ataque de CVSS denota los requisitos para que un atacante tenga acceso local, los administradores deber\u00edan ser conscientes de que, en las implementaciones de Active Directory, la vulnerabilidad podr\u00eda ser explotada remotamente aprovechando las herramientas de gesti\u00f3n remota del sistema operativo."}], "lastModified": "2019-10-09T23:35:38.250", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_meetings_desktop:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "1EAA1ED4-02CF-4ACB-94D4-5C20CBA75641", "versionEndExcluding": "33.6.4"}, {"criteria": "cpe:2.3:a:cisco:webex_productivity_tools:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94FD3F13-14B0-4156-819D-BC7D2D354013", "versionEndExcluding": "33.0.6", "versionStartIncluding": "32.6.0"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}