CVE-2020-3127

Multiple vulnerabilities in Cisco Webex Network Recording Player for Microsoft Windows and Cisco Webex Player for Microsoft Windows could allow an attacker to execute arbitrary code on an affected system. The vulnerabilities are due to insufficient validation of certain elements within a Webex recording that is stored in either the Advanced Recording Format (ARF) or the Webex Recording Format (WRF). An attacker could exploit these vulnerabilities by sending a malicious ARF or WRF file to a user through a link or email attachment and persuading the user to open the file on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.

• CWE-20
• CWE-20

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200304-webex-playerVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-269/
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200304-webex-playerVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-269/

Published

Mar 4, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3121A vulnerability in the web-based management interface of Cis…6.1
• CVE-2020-3122A vulnerability in the web-based management interface of Cis…5.3
• CVE-2020-3123A vulnerability in the Data-Loss-Prevention (DLP) module in …7.5
• CVE-2020-3124A vulnerability in the web-based interface of Cisco Hosted C…6.5
• CVE-2020-3125A vulnerability in the Kerberos authentication feature of Ci…9.8
• CVE-2020-3126vulnerability within the Multimedia Viewer feature of Cisco …3.5
• CVE-2020-3128Multiple vulnerabilities in Cisco Webex Network Recording Pl…7.8
• CVE-2020-3129A vulnerability in the web-based management interface of Cis…4.8
• CVE-2020-3130A vulnerability in the web management interface of Cisco Uni…6.5
• CVE-2020-3131A vulnerability in the Cisco Webex Teams client for Windows …6.5
• CVE-2020-3132A vulnerability in the email message scanning feature of Cis…5.9
• CVE-2020-3133A vulnerability in the email message scanning of Cisco Async…7.5