Skip to content
OpenAdvisories
Medium · 4.4 CVE-2021-34758 EUVD-2021-21408GHSA-m9hj-8j64-3cfq

Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerability

Published Oct 6, 2021 · Updated Nov 7, 2024 · Assigned by cisco

Description

A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient access controls to a shared memory resource. An attacker could exploit this vulnerability by corrupting a shared memory segment on an affected device. A successful exploit could allow the attacker to cause the device to reload. The device will recover from the corruption upon reboot.

Affected products

VendorProductAffectedFixed
Cisco Cisco RoomOS Software — —

References