cnvd - cnvd-2019-05905

CNVD-2019-05905

Vulnerability from cnvd - Published: 2019-03-02

Title

Cisco Webex Meetings Desktop App和Cisco Webex Productivity Tools操作系统命令注入漏洞

Description

Cisco Webex Meetings Desktop App和Cisco Webex Productivity Tools都是美国思科（Cisco）公司的产品。Cisco Webex Meetings Desktop App是一款使用在桌面环境上的视频会议控制应用程序。Cisco Webex Productivity Tools是一款视频会议调度工具。基于Windows平台的Cisco Webex Meetings Desktop App 33.6.6之前版本和Cisco Webex Productivity Tools 32.6.0版本至33.0.7之前版本中的更新服务存在操作系统命令注入漏洞，该漏洞源于程序未能充分地验证用户提交的参数。本地攻击者可借助特制的参数调用更新服务命令利用该漏洞以SYSTEM用户权限运行任意命令。

Severity

高

Patch Name

Cisco Webex Meetings Desktop App和Cisco Webex Productivity Tools操作系统命令注入漏洞的补丁

Patch Description

Formal description

厂商已发布漏洞修复程序，请及时关注更新： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj

Reference

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj

Impacted products

Name
['Cisco WebEx Meetings <33.6.6', 'Cisco WebEx Productivity Tools >32.6.0 (<33.0.7)']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "107184"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-1674"
    }
  },
  "description": "Cisco Webex Meetings Desktop App\u548cCisco Webex Productivity Tools\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Webex Meetings Desktop App\u662f\u4e00\u6b3e\u4f7f\u7528\u5728\u684c\u9762\u73af\u5883\u4e0a\u7684\u89c6\u9891\u4f1a\u8bae\u63a7\u5236\u5e94\u7528\u7a0b\u5e8f\u3002Cisco Webex Productivity Tools\u662f\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u8c03\u5ea6\u5de5\u5177\u3002\n\n\u57fa\u4e8eWindows\u5e73\u53f0\u7684Cisco Webex Meetings Desktop App 33.6.6\u4e4b\u524d\u7248\u672c\u548cCisco Webex Productivity Tools 32.6.0\u7248\u672c\u81f333.0.7\u4e4b\u524d\u7248\u672c\u4e2d\u7684\u66f4\u65b0\u670d\u52a1\u5b58\u5728\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u5730\u9a8c\u8bc1\u7528\u6237\u63d0\u4ea4\u7684\u53c2\u6570\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u53c2\u6570\u8c03\u7528\u66f4\u65b0\u670d\u52a1\u547d\u4ee4\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5SYSTEM\u7528\u6237\u6743\u9650\u8fd0\u884c\u4efb\u610f\u547d\u4ee4\u3002",
  "discovererName": "Marcos Accossatto from SecureAuth",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-05905",
  "openTime": "2019-03-02",
  "patchDescription": "Cisco Webex Meetings Desktop App\u548cCisco Webex Productivity Tools\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Cisco Webex Meetings Desktop App\u662f\u4e00\u6b3e\u4f7f\u7528\u5728\u684c\u9762\u73af\u5883\u4e0a\u7684\u89c6\u9891\u4f1a\u8bae\u63a7\u5236\u5e94\u7528\u7a0b\u5e8f\u3002Cisco Webex Productivity Tools\u662f\u4e00\u6b3e\u89c6\u9891\u4f1a\u8bae\u8c03\u5ea6\u5de5\u5177\u3002\r\n\r\n\u57fa\u4e8eWindows\u5e73\u53f0\u7684Cisco Webex Meetings Desktop App 33.6.6\u4e4b\u524d\u7248\u672c\u548cCisco Webex Productivity Tools 32.6.0\u7248\u672c\u81f333.0.7\u4e4b\u524d\u7248\u672c\u4e2d\u7684\u66f4\u65b0\u670d\u52a1\u5b58\u5728\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u5145\u5206\u5730\u9a8c\u8bc1\u7528\u6237\u63d0\u4ea4\u7684\u53c2\u6570\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684\u53c2\u6570\u8c03\u7528\u66f4\u65b0\u670d\u52a1\u547d\u4ee4\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5SYSTEM\u7528\u6237\u6743\u9650\u8fd0\u884c\u4efb\u610f\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Cisco Webex Meetings Desktop App\u548cCisco Webex Productivity Tools\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco WebEx Meetings \u003c33.6.6",
      "Cisco WebEx Productivity Tools \u003e32.6.0 (\u003c33.0.7)"
    ]
  },
  "referenceLink": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj",
  "serverity": "\u9ad8",
  "submitTime": "2019-02-28",
  "title": "Cisco Webex Meetings Desktop App\u548cCisco Webex Productivity Tools\u64cd\u4f5c\u7cfb\u7edf\u547d\u4ee4\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2019-1674 (GCVE-0-2019-1674)

Vulnerability from cvelistv5 – Published: 2019-02-28 18:00 – Updated: 2024-11-20 17:27

Title

Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability

Summary

A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7.

Severity ?

7.8 (High)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-78

Assigner

cisco

References

URL

Tags

	http://www.securityfocus.com/bid/107184	vdb-entryx_refsource_BID
	https://tools.cisco.com/security/center/content/C…	vendor-advisoryx_refsource_CISCO
	https://www.exploit-db.com/exploits/46479/	exploitx_refsource_EXPLOIT-DB

Impacted products

Vendor

Product

Version

Cisco

Cisco Webex Meetings Desktop App

Affected: unspecified , < 33.6.6 (custom)
Affected: unspecified , < 33.9.1 (custom)

Cisco

Cisco Webex Productivity Tools

Affected: unspecified , < 33.0.7 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T18:20:28.398Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "107184",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/107184"
          },
          {
            "name": "20190227 Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj"
          },
          {
            "name": "46479",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/46479/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2019-1674",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-20T16:55:56.691471Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-20T17:27:41.724Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco Webex Meetings Desktop App",
          "vendor": "Cisco",
          "versions": [
            {
              "lessThan": "33.6.6",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "33.9.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Cisco Webex Productivity Tools",
          "vendor": "Cisco",
          "versions": [
            {
              "lessThan": "33.0.7",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2019-02-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-78",
              "description": "CWE-78",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-03-05T10:57:02",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "107184",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/107184"
        },
        {
          "name": "20190227 Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj"
        },
        {
          "name": "46479",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/46479/"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20190227-wmda-cmdinj",
        "defect": [
          [
            "CSCvn55874"
          ]
        ],
        "discovery": "INTERNAL"
      },
      "title": "Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability",
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "DATE_PUBLIC": "2019-02-27T16:00:00-0800",
          "ID": "CVE-2019-1674",
          "STATE": "PUBLIC",
          "TITLE": "Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco Webex Meetings Desktop App",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "33.6.6"
                          },
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "33.9.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Cisco Webex Productivity Tools",
                      "version": {
                        "version_data": [
                          {
                            "affected": "\u003c",
                            "version_affected": "\u003c",
                            "version_value": "33.0.7"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Cisco"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7."
            }
          ]
        },
        "exploit": [
          {
            "lang": "en",
            "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
          }
        ],
        "impact": {
          "cvss": {
            "baseScore": "7.8",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-78"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "107184",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/107184"
            },
            {
              "name": "20190227 Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools Update Service Command Injection Vulnerability",
              "refsource": "CISCO",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj"
            },
            {
              "name": "46479",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/46479/"
            }
          ]
        },
        "source": {
          "advisory": "cisco-sa-20190227-wmda-cmdinj",
          "defect": [
            [
              "CSCvn55874"
            ]
          ],
          "discovery": "INTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2019-1674",
    "datePublished": "2019-02-28T18:00:00Z",
    "dateReserved": "2018-12-06T00:00:00",
    "dateUpdated": "2024-11-20T17:27:41.724Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2019-05905

CVE-2019-1674 (GCVE-0-2019-1674)

Tags

Sightings

Nomenclature