CVE:CVE-2021-1536
CNNVD:CNNVD-202106-188
Cisco Webex Teams是美国思科（Cisco）公司的一款用于团队协作的软件。该软件可为团队提供线上沟通，拥有共享文件、数字白板、视频会议等功能。
多款 Cisco 产品中存在代码问题漏洞，该漏洞源于运行时对目录路径的不正确处理造成的，攻击者通过获得有效Windows凭据后，可利用该漏洞对受影响的设备执行DLL注入攻击。以下产品及型号受到影响： Cisco Webex meeting Desktop App for Windows、Cisco Webex meeting Server、Cisco Webex Network Recording Player for Windows、Cisco Webex Teams for Windows。
solution:Upgrade cisco webex_meetings_desktop to a higher version than -; Upgrade cisco webex_meetings_online to a higher version than -; Upgrade cisco webex_meetings_server to a higher version than 4.0,and avoid the version 4.0; Upgrade cisco webex_network_recording_player to a higher version than -; Upgrade cisco webex_teams to a higher version than 3.0.15485.0,and avoid the version 3.0.15485.0