Vulnslist

find the latest Cisco vulnerabilities

Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities

cisco-sa-roomos-trav-beFvCcyu · Medium · Published · Updated

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device.  For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2022-20776, CVE-2022-20811, CVE-2022-20953, CVE-2022-20954, CVE-2022-20955
Cisco Bug IDsCSCwb29733, CSCwc21962, CSCwc47215, CSCwc47220, CSCwc47228
CVSS ScoreBase 5.5
Base 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N/E:X/RL:X/RC:X
Base 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N/E:X/RL:X/RC:X
Base 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:X/RL:X/RC:X
Base 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco RoomOS Software, Cisco TelePresence Endpoint Software (TC/CE)

Related Products

Product CVE Evidence
Cisco TelePresence Endpoint Software (TC/CE) CVE-2022-20955 Cisco OpenVuln
Cisco TelePresence Endpoint Software (TC/CE) CVE-2022-20954 Cisco OpenVuln
Cisco TelePresence Endpoint Software (TC/CE) CVE-2022-20953 Cisco OpenVuln
Cisco TelePresence Endpoint Software (TC/CE) CVE-2022-20811 Cisco OpenVuln
Cisco TelePresence Endpoint Software (TC/CE) CVE-2022-20776 Cisco OpenVuln
Cisco TelePresence CVE-2022-20955 Cisco OpenVuln
Cisco TelePresence CVE-2022-20954 Cisco OpenVuln
Cisco TelePresence CVE-2022-20953 Cisco OpenVuln
Cisco TelePresence CVE-2022-20811 Cisco OpenVuln
Cisco TelePresence CVE-2022-20776 Cisco OpenVuln
Cisco RoomOS Software CVE-2022-20955 Cisco OpenVuln
Cisco RoomOS Software CVE-2022-20954 Cisco OpenVuln
Cisco RoomOS Software CVE-2022-20953 Cisco OpenVuln
Cisco RoomOS Software CVE-2022-20811 Cisco OpenVuln
Cisco RoomOS Software CVE-2022-20776 Cisco OpenVuln