Is CVE-2017-3796 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2017-3796 being exploited in the wild.

How severe is CVE-2017-3796?

High severity, with a CVSS score of 7.2, published 26 January 2017.

Which products and versions are affected?

Cisco WebEx Meetings Server 2.6.

Is there a fix for CVE-2017-3796?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2017-3796 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2017-3796?

Check whether you run Cisco Webex Meetings Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2017-3796: Cisco WebEx Meetings Server command injection in interactive bash

CVE-2017-3796 · Severity: high · CVSS 7.2 · Published 2017-01-26

Cisco WebEx Meetings Server is a private conferencing platform for audio, video, and web meetings. A vulnerability in this system could allow a user who already has administrative access to one part of the system to run unauthorized commands on other connected servers. This could lead to a complete takeover of the entire conferencing infrastructure and potential access to sensitive meeting data.

Technologies: Cisco Webex Meetings Server. Vendors: Cisco.

Quick answers

Is CVE-2017-3796 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2017-3796 being exploited in the wild.
How severe is CVE-2017-3796?: High severity, with a CVSS score of 7.2, published 26 January 2017.
Which products and versions are affected?: Cisco WebEx Meetings Server 2.6.
Is there a fix for CVE-2017-3796?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2017-3796 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2017-3796?: Check whether you run Cisco Webex Meetings Server. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An OS command injection vulnerability (CWE-78) exists in Cisco WebEx Meetings Server due to insufficient security configurations of bash in interactive mode. An authenticated, remote attacker with high privileges can exploit this by connecting to a host as root and then initiating an SSH connection to another host within the cluster. By issuing specific predetermined shell commands, the attacker can execute arbitrary commands with root privileges on any other host in the WebEx Meeting Server environment. At the time of advisory publication, no software updates or workarounds were available.

Affected products

Cisco WebEx Meetings Server 2.6

Timeline

2017-01-18: advisory: Initial Cisco advisory release
2017-01-26: disclosed: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.