CVE-2025-20236 (CNNVD-202504-2629)
中文标题:
Cisco Webex 安全漏洞
英文标题:
Cisco Webex App Client-Side Remote Code Execution Vulnerability
漏洞描述
中文描述:
Cisco Webex是美国思科（Cisco）公司的一个视频会议和协作产品套件。 Cisco Webex存在安全漏洞，该漏洞源于输入验证不足，可能导致下载任意文件并执行任意命令。
英文描述:
A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download arbitrary files, which could allow the attacker to execute arbitrary commands on the host of the targeted user. This vulnerability is due to insufficient input validation when Cisco Webex App processes a meeting invite link. An attacker could exploit this vulnerability by persuading a user to click a crafted meeting invite link and download arbitrary files. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the targeted user.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Webex Teams | 44.6 | - | - |
cpe:2.3:a:cisco:cisco_webex_teams:44.6:*:*:*:*:*:*:*
|
| Cisco | Cisco Webex Teams | 44.6.0.29928 | - | - |
cpe:2.3:a:cisco:cisco_webex_teams:44.6.0.29928:*:*:*:*:*:*:*
|
| Cisco | Cisco Webex Teams | 44.6.0.30148 | - | - |
cpe:2.3:a:cisco:cisco_webex_teams:44.6.0.30148:*:*:*:*:*:*:*
|
| Cisco | Cisco Webex Teams | 44.7 | - | - |
cpe:2.3:a:cisco:cisco_webex_teams:44.7:*:*:*:*:*:*:*
|
| Cisco | Cisco Webex Teams | 44.7.0.30141 | - | - |
cpe:2.3:a:cisco:cisco_webex_teams:44.7.0.30141:*:*:*:*:*:*:*
|
| Cisco | Cisco Webex Teams | 44.7.0.30285 | - | - |
cpe:2.3:a:cisco:cisco_webex_teams:44.7.0.30285:*:*:*:*:*:*:*
|
| cisco | webex_teams | 44.6 | - | - |
cpe:2.3:a:cisco:webex_teams:44.6:*:*:*:*:*:*:*
|
| cisco | webex_teams | 44.6.0.29928 | - | - |
cpe:2.3:a:cisco:webex_teams:44.6.0.29928:*:*:*:*:*:*:*
|
| cisco | webex_teams | 44.6.0.30148 | - | - |
cpe:2.3:a:cisco:webex_teams:44.6.0.30148:*:*:*:*:*:*:*
|
| cisco | webex_teams | 44.7 | - | - |
cpe:2.3:a:cisco:webex_teams:44.7:*:*:*:*:*:*:*
|
| cisco | webex_teams | 44.7.0.30141 | - | - |
cpe:2.3:a:cisco:webex_teams:44.7.0.30141:*:*:*:*:*:*:*
|
| cisco | webex_teams | 44.7.0.30285 | - | - |
cpe:2.3:a:cisco:webex_teams:44.7.0.30285:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-20236 |
2025-11-11 15:23:05 | 2025-11-11 07:40:08 |
| NVD | nvd_CVE-2025-20236 |
2025-11-11 15:00:48 | 2025-11-11 07:47:59 |
| CNNVD | cnnvd_CNNVD-202504-2629 |
2025-11-11 15:12:41 | 2025-11-11 07:59:44 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202504-2629
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 6 -> 12
- data_sources: ['cve'] -> ['cve', 'nvd']