Vulnerability Details : CVE-2021-1417
Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Vulnerability category: Denial of service
Products affected by CVE-2021-1417
- cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*
- cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*
- cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*
- cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*
- cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*
- cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-1417
0.07%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 27 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-1417
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:P/I:N/A:N |
8.0
|
2.9
|
NIST | |
|
9.9
|
CRITICAL | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
3.1
|
6.0
|
Cisco Systems, Inc. | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
2.8
|
3.6
|
NIST |
CWE ids for CVE-2021-1417
-
The product does not terminate or incorrectly terminates a string or array with a null character or equivalent terminator.Assigned by: ykramarz@cisco.com (Secondary)
References for CVE-2021-1417
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC
Cisco Jabber Desktop and Mobile Client Software VulnerabilitiesVendor Advisory
Jump to