Meeting-Join Flaw in Cisco Webex Meetings Exposure

CVE-2025-20215

What is CVE-2025-20215?

A security flaw in the meeting-join functionality of Cisco Webex Meetings allowed an unauthenticated attacker on a local network to impersonate a valid user in meeting-join processes. This vulnerability arose due to issues with client certificate validation, enabling an attacker to intercept and manipulate meeting-join requests. By monitoring local wireless networks, an attacker could complete the join process as another user. Cisco has resolved this vulnerability in Webex Meetings, and users are not required to take any action.

References