The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system, related to deficiencies in access control, allows a intruder to escalate their privileges to root rights on the vulnerable device.

🗓️ 20 Jun 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Access control flaws in Cisco TelePresence Endpoint and RoomOS allow root privilege escalation.

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities	19 Apr 202316:00	–	cisco
Tenable Nessus	Cisco TelePresence CE and RoomOS Privilege Escalation (cisco-sa-roomos-file-write-rHKwegKf)	28 Apr 202300:00	–	nessus
CNNVD	Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software 安全漏洞	15 Nov 202400:00	–	cnnvd
CVE	CVE-2023-20090	15 Nov 202415:19	–	cve
Cvelist	CVE-2023-20090 Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability	15 Nov 202415:19	–	cvelist
EUVD	EUVD-2023-24269	3 Oct 202520:07	–	euvd
NVD	CVE-2023-20090	15 Nov 202416:15	–	nvd
OSV	CVE-2023-20090	15 Nov 202416:15	–	osv
Positive Technologies	PT-2023-3151 · Cisco · Cisco Telepresence Ce +1	19 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-20090	23 May 202501:56	–	redhatcve

Vulners

Node

cisco_systems telepresence_collaboration_endpoint_(ce)Range9–9.15.17.4

OR

cisco_systems telepresence_collaboration_endpoint_(ce)Range10–11.1.2.4

OR

cisco_systems roomosRange9–9.15.17.4

OR

cisco_systems roomosRange10–11.1.2.4

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-file-write-rHKwegKf
web	www.web.nvd.nist.gov/view/vuln/detail

20 Jun 2023 00:00Current

CVSS 26.5

CVSS 36.7

EPSS0.00232

Cisco TelePresence Endpoint RoomOS Privilege escalation Access control flaws Microprogramming software