Security advisories

Cisco Jabber Critical Vulnerability - CVE-2021-1411

March 25, 2021 | 1 MIN READ

Speak With A Security Expert Now

TALK TO AN EXPERT

THE THREAT

Cisco has announced multiple vulnerabilities impacting Cisco Jabber, a unified communications solution, affecting Windows, MacOS and mobile platforms.

The highest impact vulnerability from this release is a Remote Code Execution (RCE) vulnerability affecting Windows devices, tracked as CVE-2021-1411 (CVSS: 9.9). A previously authenticated threat actor could exploit vulnerable Cisco Jabber versions to execute arbitrary code as the user running a vulnerable Jabber client in victim environments.

Organizations are strongly recommended to apply the security update from Cisco before exploitation is identified in the wild.

What we’re doing about it

What you should do about it

Additional information

Vulnerabilities Announced:

None of the vulnerabilities listed in this advisory are known to be exploited in the wild or have functioning public Proof-of-Concept (PoC) exploit code at the time of writing. CVE-2021-1411 is likely to attract significant attention from both threat actors and security researchers.

References:

[1] https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC

View Most Recent Advisories