Meeting impersonation via empty DTLS certificate

Authentication bypass in Cisco Webex Meetings allows attackers on an adjacent network to join a meeting as a targeted user. The Webex media server accepted an empty certificate during the DTLS handshake and associated the resulting connection with the target's active meeting join. Exploitation requires monitoring and interrupting a concurrent client join within a narrow timing window; a demonstrated attack received about 30 seconds of meeting audio.