CVE-2019-1674

{"id": "CVE-2019-1674", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2019-02-28T18:29:02.087", "references": [{"url": "http://www.securityfocus.com/bid/107184", "tags": ["Third Party Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://www.exploit-db.com/exploits/46479/", "tags": ["Exploit", "Third Party Advisory"], "source": "ykramarz@cisco.com"}, {"url": "http://www.securityfocus.com/bid/107184", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/46479/", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-78"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7."}, {"lang": "es", "value": "Una vulnerabilidad en el servicio de actualizaci\u00f3n de la aplicaci\u00f3n de escritorio de Cisco Webex Meetings y Cisco Webex Productivity Tools para Windows podr\u00eda permitir a un atacante local autenticado ejecutar comandos arbitrarios del sistema operativo como un usuario privilegiado. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de los par\u00e1metros proporcionados por el usuario. Un atacante podr\u00eda explotar esta vulnerabilidad invocando el comando de actualizaci\u00f3n de servicio con un argumento manipulado. Un exploit podr\u00eda permitir que el atacante ejecute comandos arbitrarios con privilegios del usuario SYSTEM. Cuando la m\u00e9trica de vector de ataque CVSS indica el requisito que necesita un atacante para tener acceso local, los administradores deber\u00edan ser conscientes de que en los despliegues de Active Directory, la vulnerabilidad puede explotarse de manera remota, aprovechando las herramientas remotas de gesti\u00f3n del sistema operativo. Esta vulnerabilidad se soluciona en la aplicaci\u00f3n de escritorio de Cisco Webex Meetings, en las distribuciones 33.6.6 y 33.9.1. Esta vulnerabilidad se soluciona en Cisco Webex Productivity Tools, en la distribuci\u00f3n 33.0.7."}], "lastModified": "2024-11-21T04:37:04.233", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:desktop:*:*:*", "vulnerable": true, "matchCriteriaId": "177E482B-0B31-4CEB-89C9-A3E86E9AAEE5", "versionEndExcluding": "33.6.6"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings_online:t33.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "023C7AA0-D1BB-4EF1-A04F-026104E0190B"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings_online:t33.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A243CAFC-EC50-43F0-8D19-432AD23230F8"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings_online:t33.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A6D30CC-9D8D-4B8F-A95C-11EEB4D087E8"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings_online:t33.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "056F14A7-9284-4059-B9BB-C2C640CA98CC"}, {"criteria": "cpe:2.3:a:cisco:webex_productivity_tools:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D99F7CA0-2C31-446E-A3FA-72D71A0FBC2A", "versionEndExcluding": "33.0.7", "versionStartIncluding": "32.6.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}