CVE-2021-1536— Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-1536
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Webex Meetings, Webex Network Recording Player, and Webex Teams DLL Injection Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path in the system, which can cause a malicious DLL file to be loaded when the application starts. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of another user account.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
对搜索路径元素未加控制
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Webex Teams代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Webex Teams是美国思科（Cisco）公司的一款用于团队协作的软件。该软件可为团队提供线上沟通，拥有共享文件、数字白板、视频会议等功能。 多款 Cisco 产品中存在代码问题漏洞，该漏洞源于运行时对目录路径的不正确处理造成的，攻击者通过获得有效Windows凭据后，可利用该漏洞对受影响的设备执行DLL注入攻击。以下产品及型号受到影响： Cisco Webex meeting Desktop App for Windows、Cisco Webex meeting Server、Cisco
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Webex Teams | n/a | - |
II. Public POCs for CVE-2021-1536
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-1536
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-1536 (1)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-dll-inject-XNmcSGTUvendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2021-06-04 · 15 CVEs total
| CVE-2021-1540 | 8.1 HIGH | Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities |
| CVE-2021-1539 | 8.1 HIGH | Cisco ASR 5000 Series Software Authorization Bypass Vulnerabilities |
| CVE-2021-1528 | 7.8 HIGH | Cisco SD-WAN Software Privilege Escalation Vulnerability |
| CVE-2021-1526 | 7.8 HIGH | Cisco Webex Player Memory Corruption Vulnerability |
| CVE-2021-1503 | 7.8 HIGH | Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability |
| CVE-2021-1502 | 7.8 HIGH | Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability |
| CVE-2021-1564 | 6.5 MEDIUM | Cisco Video Surveillance 7000 Series IP Cameras Cisco Discovery and Link Layer Discovery P |
| CVE-2021-1563 | 6.5 MEDIUM | Cisco Video Surveillance 7000 Series IP Cameras Cisco Discovery and Link Layer Discovery P |
| CVE-2021-1537 | 6.2 MEDIUM | Cisco ThousandEyes Recorder Information Disclosure Vulnerability |
| CVE-2021-1544 | 5.5 MEDIUM | Cisco Webex Meetings Client Software Logging Information Disclosure Vulnerability |
| CVE-2021-1527 | 5.3 MEDIUM | Cisco Webex Player Memory Corruption Vulnerability |
| CVE-2021-1517 | 5.0 MEDIUM | Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerab |
| CVE-2021-1538 | 4.7 MEDIUM | Cisco Common Services Platform Collector Command Injection Vulnerability |
| CVE-2021-1525 | 4.7 MEDIUM | Cisco Webex Meetings and Webex Meetings Server File Redirect Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Webex Teams
Same vendor: Cisco
- CVE-2026-20349
Cisco Secure Firewall Adaptive Security Appliance and Secure - CVE-2026-20348
ClamAV XAR File Format Processing Memory Corruption Vulnerab - CVE-2026-20345
ClamAV GPT File Format Processing Memory Corruption Vulnerab - CVE-2026-20339
ClamAV PESpin File Format Processing Integer Overflow Vulner - CVE-2026-20347
ClamAV Mach-O File Format Processing Memory Corruption Vulne
V. Comments for CVE-2021-1536
No comments yet