Lucene search
+L

73 matches found

OSV
OSV
added 2021/05/06 1:15 p.m.3 views

CVE-2021-1532

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

6.5CVSS6.8AI score0.01432EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/05 12:0 a.m.5 views

Cisco TelePresence Collaboration Endpoint 路径遍历漏洞

Cisco TelePresence Collaboration Endpoint CE is a Cisco collaboration endpoint software used in Cisco video conferencing solutions. A path traversal vulnerability exists in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software, which stems from insufficient path validati...

6.5CVSS6.6AI score0.01432EPSS
Exploits0References4
Prion
Prion
added 2020/11/18 6:15 p.m.19 views

Improper access control

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

5.5CVSS6.4AI score0.00722EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/11/18 5:40 p.m.61 views

CVE-2020-26068

CVE-2020-26068 affects Cisco Telepresence CE Software and Cisco RoomOS Software. A flaw in the xAPI service due to insufficient access authorization allows an authenticated remote attacker to generate an access token for an affected device, potentially enabling experimental features that should n...

6.5CVSS5.9AI score0.00722EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2020/09/23 1:15 a.m.18 views

CVE-2019-15289

Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerabilities are due to insufficient input validation. A...

7.8CVSS0.01374EPSS
Exploits0References1
Prion
Prion
added 2020/09/23 1:15 a.m.22 views

Input validation

Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerabilities are due to insufficient input validation. A...

7.8CVSS7.5AI score0.01374EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/09/23 12:30 a.m.81 views

CVE-2019-15289

CVE-2019-15289 affects Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software. The issue is denial-of-service via the video service caused by insufficient input validation, exploitable by unauthenticated remote actors sending crafted traffic to the endpoint’s video service, whic...

7.8CVSS7.6AI score0.01374EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2020/06/18 2:16 a.m.10 views

CVE-2020-3336 Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerability

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem to cause a denial of service DoS or gain privileged access to the root filesystem. The vulnerabili...

7.2CVSS7.1AI score0.02074EPSS
Exploits0References1
CNVD
CNVD
added 2020/06/18 12:0 a.m.5 views

Cisco RoomOS Software and TelePresence Collaboration Endpoint Software Operating System Command Injection Vulnerability

Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software are both products of the U.S. company Cisco Cisco.Cisco RoomOS Software is a set of automatic management software for Cisco devices. The software is mainly used for upgrading and managing the motherboard firmware of Cisc...

9CVSS7.5AI score0.02074EPSS
Exploits0References1
OSV
OSV
added 2019/11/26 3:15 a.m.6 views

CVE-2019-15967

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...

4.4CVSS5.8AI score0.00288EPSS
Exploits0References1
Prion
Prion
added 2019/11/26 3:15 a.m.12 views

Design/Logic Flaw

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...

2.1CVSS4.6AI score0.00288EPSS
Exploits0References1Affected Software2
CNVD
CNVD
added 2019/11/06 12:0 a.m.5 views

Cisco TelePresence CE Software, TC Software and RoomOS Software Elevation of Privilege Vulnerabilities

Cisco RoomOS Software is a suite of automated management software for Cisco devices from Cisco.Cisco TelePresence is a telepresence solution.Cisco TelePresence CE Software is an endpoint in a videoconferencing solution known as a telepresence system. Cisco TelePresence CE Software is an endpoint ...

8.8CVSS7.3AI score0.01746EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/18 12:0 a.m.4 views

Cisco RoomOS Software License Issues Vulnerability

Cisco RoomOS Software is the United States Cisco Cisco company's set of automatic management software for Cisco devices. The software is mainly used to upgrade, manage the motherboard firmware of Cisco devices. An authorization issue vulnerability exists in versions of Cisco RoomOS Software prior...

5.5CVSS6.6AI score0.00262EPSS
Exploits0References1
Rows per page
Query Builder