Low WID-SEC-2023-0075 2 CVEs

Cisco TelePresence: Mehrere Schwachstellen

Published Jan 11, 2023 · Updated Jan 11, 2023 · de-DE

Vendor: Cisco Product: TelePresence Product: TelePresence Collaboration Endpoint < 10.19.4 Product: TelePresence Collaboration Endpoint 9 Product: TelePresence RoomOS < 10.19.3.0 Product: TelePresence RoomOS 9

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco TelePresence ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Dateien zu manipulieren.

Product

Die Cisco TelePresence Lösungen erlauben die weltweite Zusammenarbeit und Kommunikation von Kollegen, Partnern und Beobachtern.

Vulnerabilities 2

Medium 4.4

CVE-2023-20002

A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass acc…

Cisco Cisco RoomOS Software Cisco TelePresence Endpoint Software (TC/CE) Network devices

Jan 19, 2023
Medium 4.4

CVE-2023-20008

A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to…

Cisco Cisco RoomOS Software Cisco TelePresence Endpoint Software (TC/CE) Network devices

Jan 19, 2023

Revision history

2023-01-11 #1
Initiale Fassung

References

Cisco Security Advisory vom 2023-01-11
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-dkjGFgRK