The vulnerability of the command-line interface (CLI) of microprogramming software for Cisco TelePresence Collaboration Endpoint conference connection devices and Cisco RoomOS operating systems arises from lack of access control mechanisms. This allows attackers to circumvent access restrictions.

🗓️ 20 Jun 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Command line interface flaws in Cisco TelePresence endpoints and RoomOS allow bypassing access controls.

Reporter	Title	Published	Views	Family All 19
Circl	CVE-2023-20092	15 Nov 202415:16	–	circl
Cisco	Cisco TelePresence Collaboration Endpoint and RoomOS Arbitrary File Write Vulnerabilities	19 Apr 202316:00	–	cisco
CNNVD	Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software 安全漏洞	15 Nov 202400:00	–	cnnvd
CVE	CVE-2023-20004	15 Nov 202415:23	–	cve
CVE	CVE-2023-20092	15 Nov 202415:12	–	cve
CVE	CVE-2023-20093	15 Nov 202415:11	–	cve
Cvelist	CVE-2023-20092 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability	15 Nov 202415:12	–	cvelist
Cvelist	CVE-2023-20093 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability	15 Nov 202415:11	–	cvelist
EUVD	EUVD-2023-24271	3 Oct 202520:07	–	euvd
NVD	CVE-2023-20092	15 Nov 202416:15	–	nvd

Vulners

Node

cisco_systems telepresence_collaboration_endpoint_(ce)Range10–11.1.2.4

OR

cisco_systems roomosRange10–11.1.2.4

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-file-write-rHKwegKf
web	www.web.nvd.nist.gov/view/vuln/detail

20 Jun 2023 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

CVSS 34.4

EPSS0.00192

command line interface Cisco TelePresence RoomOS access control privilege escalation