CVE-2020-3127

CVE-2020-3127 describes multiple vulnerabilities in Cisco Webex Network Recording Player and Webex Player for Windows, affecting various Cisco Webex Meetings products. These flaws stem from insufficient validation of elements within ARF or WRF recording files. An attacker could exploit this by tricking a user into opening a malicious recording, leading to arbitrary code execution with the user's privileges. The vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, requiring user interaction, and potentially resulting in high impact to confidentiality, integrity, and availability. Its EPSS score is low, suggesting a low probability of exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. While there's limited community discussion and media coverage, the vulnerability is not listed on CISA's KEV catalog or Hot List.