Lucene search

[email protected]CVE-2022-20811

HistoryOct 26, 2022 - 3:15 p.m.

CVE-2022-20811

2022-10-2615:15:14

CWE-200

CWE-22

[email protected]

web.nvd.nist.gov

cisco

telepresence

collaboration

endpoint

roomos

software

security

vulnerability

cve-2022-20811

path traversal

sensitive data

arbitrary files

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.8%

JSON

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

NVD

Node

ciscotelepresence_collaboration_endpointRange9.0.0.0–9.15.13.0

ciscotelepresence_collaboration_endpointRange10.0.0.0–10.15.2.2

ciscoroomosRange<10.15.1

CPENameOperatorVersion
cisco:telepresence_collaboration_endpointcisco telepresence collaboration endpointlt9.15.13.0
cisco:telepresence_collaboration_endpointcisco telepresence collaboration endpointlt10.15.2.2
cisco:roomoscisco roomoslt10.15.1

CPE	Name	Operator	Version
cisco:telepresence_collaboration_endpoint	cisco telepresence collaboration endpoint	lt	9.15.13.0
cisco:telepresence_collaboration_endpoint	cisco telepresence collaboration endpoint	lt	10.15.2.2
cisco:roomos	cisco roomos	lt	10.15.1

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco RoomOS Software ",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]