Vulnerability · NVD

CVE-2021-1467

CVE-2021-1467, medium severity (CVSS 4.3): 1 tracked app concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 4.3
Exploitation: 0.7 %
Tracked apps: 1
Still exposed: 0

Published on 2021-04-08

A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user.

Attack vector : Network No user interaction

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS 0.75% above median percentile 52.8%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Webex Meetings Android com.cisco.webex.meetings

Affected <41.3 Fixed in 41.3 Latest tracked 45.3.0 patched

Observed affected builds (17)

41.2.1 40.10.0 40.9.1 40.8.1 40.6.1 40.4.3 40.4.1 40.2.2 39.11.0 39.7.1 39.7.0 39.6.0 39.4.0 39.3.0 11.7.1 11.6.0 11.4.1

Vulnerable CPE configurations (1)

Vendor	Product	Platform	Versions	CPE 2.3 URI
cisco	webex_meetings Android	Android	<41.3	cpe:2.3:a:cisco:webex_meetings::::::android::*

View on NVD ↗ Advisory · tools.cisco.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM