Medium severity · published Apr 8, 2021
CVE-2021-1467
Cisco Webex Meetings for Android Avatar Modification Vulnerability
4.3
CVSS
0.8%
EPSS
No
On KEV
Description
A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CW
Cisco Webex Meetings · Cisco
All versions, or not specified · source: vendor
WM
Webex Meetings · Cisco
before 41.3 · source: NVD
Affected product
CW
Cisco Webex Meetings
Cisco
More from Cisco Webex Meetings
9.8
CVE-2026-20184
Cisco Webex Meetings Certificate Validation Vulnerability
8.8
CVE-2022-20763
Cisco Webex Meetings Java Deserialization Vulnerability
7.8
CVE-2021-1526
Cisco Webex Player Memory Corruption Vulnerability
7.8
CVE-2021-1503
Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability
7.8
CVE-2021-1502
Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability