CVE-2020-3588

{"id": "CVE-2020-3588", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2020-11-06T19:15:15.110", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-vdi-qQrpBwuJ", "tags": ["Patch", "Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-vdi-qQrpBwuJ", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-22"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a targeted system. This vulnerability occurs when this app is deployed in a virtual desktop environment and using virtual environment optimization. This vulnerability is due to improper validation of messages processed by the Cisco Webex Meetings Desktop App. A local attacker with limited privileges could exploit this vulnerability by sending malicious messages to the affected software by using the virtualization channel interface. A successful exploit could allow the attacker to modify the underlying operating system configuration, which could allow the attacker to execute arbitrary code with the privileges of a targeted user. Note: This vulnerability can be exploited only when Cisco Webex Meetings Desktop App is in a virtual desktop environment on a hosted virtual desktop (HVD) and is configured to use the Cisco Webex Meetings virtual desktop plug-in for thin clients."}, {"lang": "es", "value": "Una vulnerabilidad en la mensajer\u00eda del canal de virtualizaci\u00f3n en Cisco Webex Meetings Desktop App para Windows, podr\u00eda permitir a un atacante local ejecutar c\u00f3digo arbitrario en un sistema de destino. Esta vulnerabilidad ocurre cuando esta aplicaci\u00f3n es implementada en un entorno de escritorio virtual y se utiliza la optimizaci\u00f3n del entorno virtual.  Esta vulnerabilidad es debido a una comprobaci\u00f3n inapropiada de los mensajes procesados ??por Cisco Webex Meetings Desktop App. Un atacante local con privilegios limitados podr\u00eda explotar esta vulnerabilidad mediante el env\u00edo mensajes maliciosos al software afectado mediante la interfaz del canal de virtualizaci\u00f3n. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir al atacante modificar la configuraci\u00f3n del sistema operativo subyacente, lo que podr\u00eda permitir al atacante ejecutar c\u00f3digo arbitrario con los privilegios de un usuario apuntado. Nota: Esta vulnerabilidad puede ser explotada solo cuando Cisco Webex Meetings Desktop App se encuentra en un entorno de escritorio virtual en un hosted virtual desktop (HVD) y est\u00e1 configurado para usar el plug-in virtual desktop de Webex Meetings para clientes ligeros"}], "lastModified": "2024-11-21T05:31:21.987", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "E4469083-4663-441D-8C84-089BEAB7D01C", "versionEndExcluding": "40.6.9"}, {"criteria": "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "2B7126CB-99CB-40AE-B7C9-6758A9A2295D", "versionEndExcluding": "40.8.9", "versionStartIncluding": "40.8.0"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}