What is CVE-2020-3342?

CVE-2020-3342 is a high-severity vulnerability in Cisco Webex Meetings Server, classified under Improper Certificate Validation. CVSS score: 8.8/10. Published 2020-06-18.

How severe is CVE-2020-3342?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Cisco Webex Meetings Server

CVE-2020-3342

A vulnerability in the software update feature of Cisco Webex Meetings Desktop App for Mac could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. The vulnerability is due to improper validation of…

Vulnerability class: Improper Certificate Validation

EPSS: 0.038 (88.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Cisco Webex Meetings Server — versions n/a
Cisco Webex_meetings

Weakness classification (CWE)

CWE-295 — Improper Certificate Validation

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3342?: CVE-2020-3342 is a high-severity vulnerability in Cisco Webex Meetings Server, classified under Improper Certificate Validation. CVSS score: 8.8/10. Published 2020-06-18.
How severe is CVE-2020-3342?: High severity. CVSS v3 base score is 8.8 out of 10.