CVE-2020-3128

CVE-2020-3128 describes multiple vulnerabilities in Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows. These flaws stem from insufficient validation of elements within ARF or WRF recording files, affecting Cisco Webex Meetings, Meetings Online, Meetings Server, and the Network Recording Player. With a CVSS score of 7.8 (High), exploitation requires user interaction (UI:R) to open a malicious recording file, leading to arbitrary code execution with the user's privileges. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has received some community discussion and media coverage, indicating awareness.