Lucene search

K
nvd[email protected]NVD:CVE-2022-20811
HistoryOct 26, 2022 - 3:15 p.m.

CVE-2022-20811

2022-10-2615:15:14
CWE-200
CWE-22
web.nvd.nist.gov
cisco
telepresence
collaboration endpoint
roomos
path traversal attacks
sensitive data viewing
arbitrary file writing.

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

38.8%

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

NVD
Node
ciscotelepresence_collaboration_endpointRange9.0.0.09.15.13.0
OR
ciscotelepresence_collaboration_endpointRange10.0.0.010.15.2.2
OR
ciscoroomosRange<10.15.1

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

38.8%

Related for NVD:CVE-2022-20811