Cisco TelePresence Collaboration Endpoint Software and RoomOS Software DoS (cisco-sa-tce-roomos-dos-9V9jrC2q)

According to its self-reported version, Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service is affected by a vulnerability. - A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software cou...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system, related to deficiencies in access control, allows a intruder to escalate their privileges to root rights on the vulnerable device.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system, related to access control deficiencies, allows a intruder to gain access to confidential data.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system is related to reading data from buffers beyond the allowed limits. Exploiting this vulnerability allows a malicious actor to gai...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint (CE) device, related to deficiencies in access control to the version-controlled repository, allows a perpetrator to gain read, modify, or delete access to data.

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint device is related to deficiencies in access control to the version-controlled repository. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to data...

CVE-2022-20955

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the...

CVE-2022-20954

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the...

CVE-2022-20954

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the...

CVE-2022-20811

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the...

PT-2022-5341 · Cisco · Cisco Roomos +1

Name of the Vulnerable Software and Affected Versions: Cisco TelePresence Collaboration Endpoint CE Software affected versions not specified Cisco RoomOS Software affected versions not specified Description: The issue is related to incorrect directory path restriction in the xAPI component of the...

The vulnerability of the microprogramming software of the Cisco TelePresence Collaboration Endpoint conference call control device and the Cisco RoomOS operating system arises from the failure to remove encrypted URI schemes from web pages. This allows a perpetrator to trigger a service failure or expose protected information.

The vulnerability of the Microprogramming Software of the Cisco TelePresence Collaboration Endpoint CE device and the Cisco RoomOS operating system is related to the lack of measures taken to neutralize encrypted URI schemes on web pages. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint (CE) conference call control device and the Cisco RoomOS operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the xAPI microprogramming software components of the Cisco TelePresence Collaboration Endpoint conference call management device and the Cisco RoomOS operating system is related to an error in the processing of authentication keys controlled by users. Exploiting this...

The vulnerabilities of the xAPI microprogramming software components of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and the operating system Cisco RoomOS allow attackers to gain unauthorized access to protected information and write arbitrary files to the device’s file system.

The vulnerability of the xAPI microprogramming software components of Cisco TelePresence Collaboration Endpoint, Cisco TelePresence Codec, and the operating system Cisco RoomOS exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability can...

CVE-2019-15962

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by...

CVE-2019-15277

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE Software could allow an authenticated, local attacker to execute code with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating as the...

PT-2011-2294

Name of the Vulnerable Software and Affected Versions Cisco TelePresence endpoint devices versions 1.2.x through 1.5.x Description The issue allows remote attackers to execute arbitrary commands via a malformed request, related to command injection vulnerabilities. Recommendations For versions...

CVE-2011-0377: Undefined Security Weakness

Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x allow remote attackers to cause a denial of service service crash via a malformed SOAP request in conjunction with a spoofed TelePresence Manager that supplies an invalid IP address, aka Bug ID CSCth03605...

CVE-2011-0376: Exposure of Sensitive Information to an Unauthorized Actor

The TFTP implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x, 1.6.0, and 1.6.1 allows remote attackers to obtain sensitive information via a GET request, aka Bug ID CSCte43876...

PT-2011-2301

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliances ASA 5500 series devices versions 1.6.x Cisco TelePresence Multipoint Switch CTMS devices versions 1.0.x through 1.6.x Cisco TelePresence endpoint devices versions 1.2.x through 1.6.x Cisco TelePresence Manage...

CVE-2011-0378: Improper Neutralization of Special Elements used in an OS Command

The XML-RPC implementation on Cisco TelePresence endpoint devices with software 1.2.x through 1.5.x allows remote attackers to execute arbitrary commands via a TCP request, related to a "command injection vulnerability," aka Bug ID CSCtb52587...

PT-2011-2298

Name of the Vulnerable Software and Affected Versions Cisco TelePresence endpoint devices versions 1.2.x through 1.5.x Cisco TelePresence endpoint devices version 1.6.0 Cisco TelePresence endpoint devices version 1.6.1 Description The issue allows remote attackers to obtain sensitive information...