Is CVE-2017-3794 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2017-3794 being exploited in the wild.

How severe is CVE-2017-3794?

High severity, with a CVSS score of 8.8, published 26 January 2017.

Which products and versions are affected?

Cisco WebEx Meetings Server 2.6.

Is there a fix for CVE-2017-3794?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2017-3794 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2017-3794?

Check whether you run Cisco Webex Meetings Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2017-3794: Cisco WebEx Meetings Server CSRF in Administration pages

CVE-2017-3794 · Severity: high · CVSS 8.8 · Published 2017-01-26

Cisco WebEx Meetings Server is a private, virtualized conferencing solution for businesses. A security flaw in its administration interface could allow an attacker to trick a system administrator into performing unintended actions, such as changing settings or user permissions. This occurs if the administrator clicks a malicious link or visits a compromised website while logged into the WebEx management console.

Technologies: Cisco Webex Meetings Server. Vendors: Cisco.

Quick answers

Is CVE-2017-3794 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2017-3794 being exploited in the wild.
How severe is CVE-2017-3794?: High severity, with a CVSS score of 8.8, published 26 January 2017.
Which products and versions are affected?: Cisco WebEx Meetings Server 2.6.
Is there a fix for CVE-2017-3794?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2017-3794 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2017-3794?: Check whether you run Cisco Webex Meetings Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Administration pages of Cisco WebEx Meetings Server due to insufficient CSRF protections. An unauthenticated, remote attacker can exploit this by inducing an authenticated administrative user to interact with a malicious link or website. If successful, the attacker can submit arbitrary requests to the affected device with the privileges of the targeted administrator. The vulnerability is tracked under Cisco Bug ID CSCuz03317 and is fixed in version 2.7.1.12.

Affected products

Cisco WebEx Meetings Server 2.6

Timeline

2017-01-18: advisory: Initial Cisco advisory release
2017-01-26: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.