CVE-2020-3430
Last modified
CVE-2020-3430 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. EPSS estimates a 3.90% chance of exploitation in the next 30 days.
Description
A vulnerability in the application protocol handling features of Cisco Jabber for Windows could allow an unauthenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper handling of input to the application protocol handlers. An attacker could exploit this vulnerability by convincing a user to click a link within a message sent by email or other messaging platform. A successful exploit could allow the attacker to execute arbitrary commands on a targeted system with the privileges of the user account that is running the Cisco Jabber client software.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Jabber | >= 12.1, < 12.1.3 |
| Cisco | Jabber | >= 12.5, < 12.5.2 |
| Cisco | Jabber | >= 12.6, < 12.6.3 |
| Cisco | Jabber | >= 12.7, < 12.7.2 |
| Cisco | Jabber | >= 12.8, < 12.8.3 |
| Cisco | Jabber | >= 12.9, < 12.9.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-3430?
How severe is CVE-2020-3430?
How do I fix CVE-2020-3430?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-3423A vulnerability in the implementation of the Lua interpreter…6.7
- CVE-2020-3425Multiple vulnerabilities in the web management framework of …8.8
- CVE-2020-3426A vulnerability in the implementation of the Low Power, Wide…9.1
- CVE-2020-3427The Windows Logon installer prior to 4.1.2 did not properly …7.8
- CVE-2020-3428A vulnerability in the WLAN Local Profiling feature of Cisco…6.5
- CVE-2020-3429A vulnerability in the WPA2 and WPA3 security implementation…6.5
- CVE-2020-3431A vulnerability in the web-based management interface of Cis…6.1
- CVE-2020-3432A vulnerability in the uninstaller component of Cisco AnyCon…5.6
- CVE-2020-3433A vulnerability in the interprocess communication (IPC) chan…7.8
- CVE-2020-3434A vulnerability in the interprocess communication (IPC) chan…5.5
- CVE-2020-3435A vulnerability in the interprocess communication (IPC) chan…5.5
- CVE-2020-3436A vulnerability in the web services interface of Cisco Adapt…8.6
Are you affected by CVE-2020-3430?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST