CVE-2020-3322

CVE-2020-3322 is a denial-of-service vulnerability affecting Cisco Webex Network Recording Player and Cisco Webex Player for Microsoft Windows. It arises from insufficient validation of elements within malicious Advanced Recording Format (ARF) or Webex Recording Format (WRF) files. An attacker could exploit this by tricking a user into opening a specially crafted file, causing the player application to crash. The vulnerability has a low CVSS score of 3.3, indicating a local attack vector with low complexity, requiring user interaction, and resulting in only a low impact denial of service. There is no evidence of active exploitation, nor are there any public exploit codes available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, with no mentions across social media or news articles, suggesting a low level of public awareness and concern. The EPSS and FAUCET Risk Scores also indicate a very low probability of exploitation.