CVE-2020-3440 Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability

Medium 6.5 Published 26 Aug 2020 Updated 13 Nov 2024

Remote attackers can overwrite arbitrary files on Windows systems via crafted URLs, potentially corrupting critical system files.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2020-3440?

CVE-2020-3440 is a medium-severity path traversal vulnerability in Cisco Webex Meetings, published on 26 Aug 2020. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attacker could exploit this vulnerability by persuading a user to follow a URL to a website that is designed to submit crafted input to the affected application. A successful exploit could allow the attacker to overwrite arbitrary files on the affected system, possibly corrupting or deleting critical system files.

Weakness: CWE-22

Which versions are affected by CVE-2020-3440?

It affects 1 product.

Products include Cisco Webex Meetings.

How do I fix CVE-2020-3440?

No fix has been published for CVE-2020-3440 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2020-3440 being exploited?

There is no known exploitation of CVE-2020-3440 in the wild and no public exploit code.

All Cisco Webex Meetings vulnerabilities

Sources

Also known as GHSA-qgrx-x3h5-xg68.