CVE-2020-3194
Cisco WebEx Network Recording Player vulnerability analysis and mitigation

Overview

A critical vulnerability (CVE-2020-3194) was discovered in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows. The vulnerability was disclosed on April 15, 2020, with a CVSS base score of 7.8, indicating a high severity level. This security flaw affects the Cisco Webex Meetings application, specifically version 39.5.17 and potentially other versions (Cisco Advisory, ManageEngine).

Technical details

The vulnerability has been assigned a CVSS 3.0 score of 7.8 with the following vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires local access (AV:L), low attack complexity (AC:L), no privileges required (PR:N), user interaction required (UI:R), with potential for high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H) (Cisco Advisory).

Impact

The vulnerability could potentially allow an attacker to execute arbitrary code on the affected system with high impacts on system confidentiality, integrity, and availability. The critical severity rating and high CVSS score indicate significant potential impact if successfully exploited (ManageEngine).

Exploitability

As of the vulnerability disclosure, no public exploits were known to be available for this vulnerability (ManageEngine).

Additional resources


SourceThis report was generated using AI

Related Cisco WebEx Network Recording Player vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2021-1502HIGH7.8
  • Cisco Webex Teams logoCisco Webex Teams
  • cpe:2.3:a:cisco:webex_network_recording_player
NoYesJun 04, 2021
CVE-2020-3194HIGH7.8
  • Cisco WebEx Network Recording Player logoCisco WebEx Network Recording Player
  • cpe:2.3:a:cisco:webex_meetings
NoYesApr 15, 2020
CVE-2020-3128HIGH7.8
  • Cisco WebEx Network Recording Player logoCisco WebEx Network Recording Player
  • cpe:2.3:a:cisco:webex_meetings
NoYesMar 04, 2020
CVE-2020-3321LOW3.3
  • Cisco WebEx Player logoCisco WebEx Player
  • cpe:2.3:a:cisco:webex_network_recording_player
NoYesJun 03, 2020
CVE-2020-3319LOW3.3
  • Cisco WebEx Player logoCisco WebEx Player
  • cpe:2.3:a:cisco:webex_player:*:*:*:*:*:windows:*:*
NoNoJun 03, 2020

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management