Intrusion PreventionCisco.WebEx.nativeMessaging.Command.Execution
Description
This indicates an attack attempt to exploit a command execution vulnerability in Cisco WebEx Chrome Extension.
The vulnerability is caused by lacking of checking the message sent by "cwcsf-nativemsg-iframe-43c85c0d-d633-af5e-c056-32dc7efc570b.html". A remote attacker may be able to exploit this to execute arbitrary code within the context of the application.
Affected Products
Cisco WebEx Extension for Chrome before version 1.0.3
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Update the extension to the latest version.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-06-10 | 14.629 | Severity:critical:high |
| ID | 43606 |
| Created | Jan 27, 2017 |
| Updated | Jun 07, 2019 |
| Risk |
|
| CVE ID | CVE-2017-3823 |
| Exploit Prediction Score | 87.89% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Cisco |