CVE:CVE-2019-1674
CNNVD:CNNVD-201902-983
Cisco Webex Meetings Desktop App和Cisco Webex Productivity Tools都是美国思科（Cisco）公司的产品。Cisco Webex Meetings Desktop App是一款使用在桌面环境上的视频会议控制应用程序。Cisco Webex Productivity Tools是一款视频会议调度工具。
基于Windows平台的Cisco Webex Meetings Desktop App 33.6.6之前版本和Cisco Webex Productivity Tools 32.6.0版本至33.0.7之前版本中的更新服务存在操作系统命令注入漏洞，该漏洞源于程序没有充分地验证用户提交的参数。本地攻击者可借助特制的参数调用更新服务命令利用该漏洞以SYSTEM用户权限运行任意命令。
solution:Upgrade cisco webex_meetings to a higher version than 33.6.6,and avoid the version (,33.6.6); Upgrade cisco webex_meetings_online to a higher version than t33.0.5,t33.6.0,t33.6.1,t33.6.2,and avoid the version t33.0.5,t33.6.0,t33.6.1,t33.6.2; Upgrade cisco webex_productivity_tools to a higher version than 33.0.7,and avoid the version [32.6.0,33.0.7)