Skip to content
OpenAdvisories
Medium WID-SEC-2023-1043 6 CVEs

Cisco TelePresence: Mehrere Schwachstellen

Published Apr 19, 2023 · Updated Apr 19, 2023 · de-DE

Vendor: Cisco Product: TelePresence Product: TelePresence < 11.1.2.4 Product: TelePresence < 9.15.17.4 Product: TelePresence < RoomOS March 2023

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco TelePresence ausnutzen, um seine Privilegien zu erhöhen, Dateien zu manipulieren oder Informationen offenzulegen.

Product

Die Cisco TelePresence Lösungen erlauben die weltweite Zusammenarbeit und Kommunikation von Kollegen, Partnern und Beobachtern.

Vulnerabilities 6

  • Medium 6.7
    CVE-2023-20090

    Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability

    A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI commands. An attacker could exploit this …

    Cisco Cisco RoomOS Software Cisco TelePresence Endpoint Software (TC/CE) Network devices
  • Medium 5.1
    CVE-2023-20091

    Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

    A vulnerability in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. This vulnerability is due to improper access controls on files that are on…

    Cisco Cisco TelePresence Endpoint Software (TC/CE) Network devices
  • Medium 4.4
    CVE-2023-20004

    Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Write Vulnerability

    Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files t…

    Cisco Cisco RoomOS Software Cisco TelePresence Endpoint Software (TC/CE) Network devices
  • Medium 4.4
    CVE-2023-20092

    Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

    Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files t…

    Cisco Cisco RoomOS Software Cisco TelePresence Endpoint Software (TC/CE) Network devices
  • Medium 4.4
    CVE-2023-20093

    Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

    Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files t…

    Cisco Cisco RoomOS Software Cisco TelePresence Endpoint Software (TC/CE) Network devices
  • Medium 4.3
    CVE-2023-20094

    Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability

    A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. This vulnerability exists because the affected software performs improper bounds checks. An attacker cou…

    Cisco Cisco RoomOS Software Cisco TelePresence Endpoint Software (TC/CE) Network devices

Revision history

  1. #1

    Initiale Fassung

References