More details on the security alerts can be found at.
System administrators using the affected products should install the latest security updates immediately. Successful exploitation of these critical vulnerabilities could allow attackers to take control of the affected system to perform malicious activities, including unauthorised installation of programs, the creation of rogue administrator accounts and the ability to view, change or delete data. Or if you've downloaded a file, get the Webex Player below (file types are. If you receive an email with a link to a Webex recording, just click on the link to watch it.
This will then allow the attacker to perform remote code execution on the user's operating system. The Webex Player is an application used to play back and edit recorded Webex meeting files.Īn attacker can exploit these vulnerabilities by sending a targeted user an Advanced Recording Format (ARF) or WebEx Recording Format (WRF) file, to trick the user into opening the file. The Webex Network Recording Player is an application used to convert Webex recording files to standard formats such as Windows Media Video, Flash or MP4.
MP4 conversion process.Cisco has released software patches to address critical vulnerabilities (CVE-2019-15283, CVE-2019-15284, CVE-2019-15285, CVE-2019-15286, CVE-2019-15287) found in the Cisco Webex Network Recording Player and Cisco Webex Player. Note: Create a 'plugin' folder if it does not already exist. DLL files to the location: C:\Program Files (x86)\WebEx\Webex\500\plugin Unzip the files and extract the complete 'plugin' folder to the location: C:\Program Files (x86)\WebEx\Webex\500.
This plug-in is controlled due to licensing requirements and requires users to authenticate to their Webex host account when downloading the file.Įnter your site URL and username and password when prompted. MP4 format requires a special plug-in to be installed to the Network-Recording Player. You may receive a prompt to authenticate in the following dialog window when trying to convert Network-Based Recordings to.