CVE-2018-15416 is a critical vulnerability affecting Cisco Webex Network Recording Player and Webex Player for Windows, including versions of Webex Business Suite and Webex Meetings. This flaw allows for arbitrary code execution due to improper validation of ARF and WRF files. An attacker could exploit this by tricking a user into opening a specially crafted malicious file, leading to full system compromise. While rated with a high CVSS score of 7.8, there is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat landscape.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.3.37CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_online:*:*:*:*:*:*:*:* | ||
2.5CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_server:2.5:maintenance_release2_patch1:*:*:*:*:*:* | ||
2.5CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_server:2.5:maintenance_release5_patch1:*:*:*:*:*:* | ||
2.5CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_server:2.5:maintenance_release6_patch2:*:*:*:*:*:* | ||
2.5CPE matchmatch criteria | cpe:2.3:a:cisco:webex_meetings_server:2.5:maintenance_release6_patch3:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.