Lucene search
+L

1769 matches found

BDU FSTEC
BDU FSTEC
added 2021/05/19 12:00 a.m.10 views

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint (CE) conference call control device and the Cisco RoomOS operating system allows a hacker to read arbitrary files.

The vulnerability of the xAPI microprogramming software components of the Cisco TelePresence Collaboration Endpoint conference call management device and the Cisco RoomOS operating system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this...

6.8CVSS6.7AI score0.01432EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2021/05/06 1:15 p.m.7 views

CVE-2021-1532

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

6.5CVSS6.8AI score0.01432EPSS
SaveExploits0References1
NVD
NVD
added 2021/05/06 1:15 p.m.17 views

CVE-2021-1532

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

6.5CVSS0.01432EPSS
SaveExploits0References1
Prion
Prion
added 2021/05/06 1:15 p.m.18 views

Design/Logic Flaw

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

4CVSS6.5AI score0.01432EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2021/05/06 12:51 p.m.54 views

CVE-2021-1532

CVE-2021-1532 affects Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software via the video endpoint API (xAPI). The issue arises from insufficient path validation of command arguments, allowing an authenticated, remote attacker to read arbitrary files on the device filesystem. A...

6.5CVSS6.4AI score0.01432EPSS
SaveExploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2021/05/06 12:51 p.m.10 views

CVE-2021-1532 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

6.5CVSS6.9AI score0.01432EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/05/06 12:51 p.m.30 views

CVE-2021-1532 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

6.5CVSS6.6AI score0.01432EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/05/05 4:00 p.m.5 views

CVE-2021-1532

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

6.5CVSS6.8AI score0.01432EPSS
SaveExploits0References2
Cisco
Cisco
added 2021/05/05 4:00 p.m.88 views

Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

6.5CVSS6.5AI score0.01432EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/05/05 12:00 a.m.9 views

Cisco TelePresence Collaboration Endpoint 路径遍历漏洞

Cisco TelePresence Collaboration Endpoint CE is a Cisco collaboration endpoint software used in Cisco video conferencing solutions. A path traversal vulnerability exists in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software, which stems from insufficient path validati...

6.5CVSS6.6AI score0.01432EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/12/03 12:00 a.m.13 views

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint (CE) conference call control device and the Cisco RoomOS operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the xAPI microprogramming software components of the Cisco TelePresence Collaboration Endpoint conference call management device and the Cisco RoomOS operating system is related to an error in the processing of authentication keys controlled by users. Exploiting this...

5.5CVSS7AI score0.00731EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2020/11/23 12:00 a.m.7 views

Cisco RoomOS Software Privilege Permission and Access Control Issues Vulnerability

Cisco RoomOS Software is the United States Cisco Cisco company's set of automatic management software for Cisco devices. The software is mainly used to upgrade, manage the motherboard firmware of Cisco devices. A privilege permission and access control issue vulnerability exists in Cisco...

6.5CVSS6.8AI score0.00731EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/18 6:15 p.m.6 views

CVE-2020-26068

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

6.5CVSS6.6AI score0.00731EPSS
SaveExploits0References1
NVD
NVD
added 2020/11/18 6:15 p.m.12 views

CVE-2020-26068

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

6.5CVSS5.7AI score0.00731EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/18 5:40 p.m.67 views

CVE-2020-26068

CVE-2020-26068 affects Cisco Telepresence CE Software and Cisco RoomOS Software. A flaw in the xAPI service due to insufficient access authorization allows an authenticated remote attacker to generate an access token for an affected device, potentially enabling experimental features that should n...

6.5CVSS5.9AI score0.00731EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2020/11/18 5:40 p.m.21 views

CVE-2020-26068 Cisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

5.5CVSS6.4AI score0.00731EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/11/18 5:40 p.m.11 views

CVE-2020-26068 Cisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

5.5CVSS6.8AI score0.00731EPSS
SaveExploits0References1
Cisco
Cisco
added 2020/11/18 4:00 p.m.43 views

Cisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

5.5CVSS5.9AI score0.00731EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/11/18 12:00 a.m.14 views

Cisco RoomOS Software 权限许可和访问控制问题漏洞

Cisco RoomOS Software is the United States Cisco Cisco company's set of automatic management software for Cisco devices. The software is mainly used to upgrade, manage the motherboard firmware of Cisco devices. A privilege permission and access control issue vulnerability exists in Cisco...

6.5CVSS6.6AI score0.00731EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2020/11/17 12:00 a.m.8 views

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint device allows a intruder to gain unauthorized access to protected information.

The vulnerability of the xAPI microprogramming software component of the Cisco TelePresence Collaboration Endpoint device relates to the disclosure of information in the erroneous data area. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to...

4.3CVSS5.5AI score0.00848EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder