CVE-2021-1242: Cisco Webex Teams Shared File Manipulation Vulnerability

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-01-13 · updated 2026-06-17
Weakness: CWE-450

Description

A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The vulnerability exists because the affected software mishandles character rendering. An attacker could exploit this vulnerability by sharing a file within the application interface. A successful exploit could allow the attacker to modify how the shared file name displays within the interface, which could allow the attacker to conduct phishing or spoofing attacks.

Affected products

Cisco Webex Teams: before 40.12.0.17293 — fixed in 40.12.0.17293

How to fix

Upgrade to a fixed version: Cisco Webex Teams 40.12.0.17293. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-1242 or the next vulnerability affects your stack