{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-22T22:36:20.976","vulnerabilities":[{"cve":{"id":"CVE-2019-1674","sourceIdentifier":"psirt@cisco.com","published":"2019-02-28T18:29:02.087","lastModified":"2024-11-21T04:37:04.233","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the update service of Cisco Webex Meetings Desktop App and Cisco Webex Productivity Tools for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied parameters. An attacker could exploit this vulnerability by invoking the update service command with a crafted argument. An exploit could allow the attacker to run arbitrary commands with SYSTEM user privileges. While the CVSS Attack Vector metric denotes the requirement for an attacker to have local access, administrators should be aware that in Active Directory deployments, the vulnerability could be exploited remotely by leveraging the operating system remote management tools. This vulnerability is fixed in Cisco Webex Meetings Desktop App Release 33.6.6 and 33.9.1 releases. This vulnerability is fixed in Cisco Webex Productivity Tools Release 33.0.7."},{"lang":"es","value":"Una vulnerabilidad en el servicio de actualización de la aplicación de escritorio de Cisco Webex Meetings y Cisco Webex Productivity Tools para Windows podría permitir a un atacante local autenticado ejecutar comandos arbitrarios del sistema operativo como un usuario privilegiado. Esta vulnerabilidad se debe a una validación insuficiente de los parámetros proporcionados por el usuario. Un atacante podría explotar esta vulnerabilidad invocando el comando de actualización de servicio con un argumento manipulado. Un exploit podría permitir que el atacante ejecute comandos arbitrarios con privilegios del usuario SYSTEM. Cuando la métrica de vector de ataque CVSS indica el requisito que necesita un atacante para tener acceso local, los administradores deberían ser conscientes de que en los despliegues de Active Directory, la vulnerabilidad puede explotarse de manera remota, aprovechando las herramientas remotas de gestión del sistema operativo. Esta vulnerabilidad se soluciona en la aplicación de escritorio de Cisco Webex Meetings, en las distribuciones 33.6.6 y 33.9.1. Esta vulnerabilidad se soluciona en Cisco Webex Productivity Tools, en la distribución 33.0.7."}],"metrics":{"cvssMetricV30":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:C/I:C/A:C","baseScore":9.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-78"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-78"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings:*:*:*:*:desktop:*:*:*","versionEndExcluding":"33.6.6","matchCriteriaId":"177E482B-0B31-4CEB-89C9-A3E86E9AAEE5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_online:t33.0.5:*:*:*:*:*:*:*","matchCriteriaId":"023C7AA0-D1BB-4EF1-A04F-026104E0190B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_online:t33.6.0:*:*:*:*:*:*:*","matchCriteriaId":"A243CAFC-EC50-43F0-8D19-432AD23230F8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_online:t33.6.1:*:*:*:*:*:*:*","matchCriteriaId":"5A6D30CC-9D8D-4B8F-A95C-11EEB4D087E8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_meetings_online:t33.6.2:*:*:*:*:*:*:*","matchCriteriaId":"056F14A7-9284-4059-B9BB-C2C640CA98CC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:webex_productivity_tools:*:*:*:*:*:*:*:*","versionStartIncluding":"32.6.0","versionEndExcluding":"33.0.7","matchCriteriaId":"D99F7CA0-2C31-446E-A3FA-72D71A0FBC2A"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA"}]}]}],"references":[{"url":"http://www.securityfocus.com/bid/107184","source":"psirt@cisco.com","tags":["Third Party Advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj","source":"psirt@cisco.com","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/46479/","source":"psirt@cisco.com","tags":["Exploit","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/107184","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]},{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-wmda-cmdinj","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/46479/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"]}]}}]}