1769 matches found
Design/Logic Flaw
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...
CVE-2019-15288 Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE, Cisco TelePresence Codec TC, and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. The vulnerability is due to insufficient input...
CVE-2019-15288
The CVE-2019-15288 issue affects Cisco TelePresence CE/TC and RoomOS Software. It stems from insufficient input validation in the CLI, allowing an authenticated, remote attacker to exploit specific SSH arguments to escalate privileges to an unrestricted user in the restricted shell. Documented im...
CVE-2019-15288 Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE, Cisco TelePresence Codec TC, and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. The vulnerability is due to insufficient input...
CVE-2019-15967 Cisco TelePresence Collaboration Endpoint and RoomOS Audio Eavesdropping Vulnerability
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...
CVE-2019-15967 Cisco TelePresence Collaboration Endpoint and RoomOS Audio Eavesdropping Vulnerability
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...
CVE-2019-15967
The CVE-2019-15967 issue affects Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software. A vulnerability in the CLI allows an authenticated, local attacker to enable audio recording without user notification by exploiting unnecessary debug commands and gaining unrestricted acces...
The vulnerability in the web interface of Cisco Expressway micro-program software and the Cisco TelePresence Video Communication Server control devices allows a perpetrator to execute arbitrary code or access confidential information.
The vulnerability of the web interface for managing microprogramming software on Cisco Expressway and the Cisco TelePresence Video Communication Server exists due to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a malicious actor to execute...
The numerous vulnerabilities in the command-line interface (CLI) of the Cisco TelePresence Collaboration Endpoint (CE) software allow attackers to compromise the integrity of protected information or cause service failures.
The multiple vulnerabilities of the command-line interface CLI of the Cisco TelePresence Collaboration Endpoint CE device’s management software exist due to insufficient validation of input data. Exploitation of these vulnerabilities could allow attackers to compromise the integrity of protected...
The vulnerability of the command-line interface (CLI) of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices allows a attacker to execute arbitrary code with root privileges.
The vulnerability of the command-line interface CLI of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices is related to deficiencies in access control. Exploiting this vulnerability could allow a attacker to execute arbitrary code with root privileges by sending...
The vulnerability of the command-line interface (CLI) of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices allows a perpetrator to execute arbitrary code.
The vulnerability of the command-line interface CLI of the microprogramming software for Cisco TelePresence Collaboration Endpoint devices relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Cisco TelePresence Collaboration Endpoint < 9.8.1 Audio Eavesdropping Vulnerability
According to its self-reported version, the Cisco TelePresence Collaboration Endpoint CE software is a version prior to 9.8.1. It is, therefore, affected by a vulnerability in the CLI which could allow an authenticated, local attacker to enable audio recording without notifying users. C Tenable...
Cisco TelePresence Endpoint Software Privilege Escalation Vulnerability
According to its self-reported version, the Cisco TelePresence Codec TC and Collaboration Endpoint CE Cisco TelePresence Software is affected by software privilege escalation vulnerability. An authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. T...
Cisco TelePresence Advanced Media Gateway Denial of Service Vulnerability
Cisco TelePresence Advanced Media Gateway is a high-definition multimedia gateway device from Cisco USA. A security vulnerability exists in the web application in Cisco TelePresence Advanced Media Gateway, which stems from a lack of input validation in the program. A remote attacker could exploit...
Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write (cisco-sa-20191016-tele-ce-filewrite)
According to its self-reported version, the Cisco TelePresence Collaboration Endpoint CE Cisco TelePresence Software is affected by a vulnerability due to improper permission assignment. An authenticated, local attacker can exploit this by logging in as the remotesupport user to write files to th...
Cisco TelePresence Collaboration Endpoint Software Command Injection Vulnerability (cisco-sa-20191016-tele-ce-cmdinj)
According to its self-reported version, the Cisco TelePresence Collaboration Endpoint CE Cisco TelePresence Software is affected by a command injection vulnerability in the CLI due to insufficient input validation. An authenticated, local attacker can exploit this by authenticating as an...
Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE, Cisco TelePresence Codec TC, and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. The vulnerability is due to insufficient input...
Cisco TelePresence Collaboration Endpoint and RoomOS Audio Eavesdropping Vulnerability
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...
Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerabilities
Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerabilities are due to insufficient input validation. A...
Multiple Cisco Products CVE-2019-15967 Local Security Bypass Vulnerability
Description Multiple Cisco Products are prone to a local security-bypass vulnerability. An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may lead to further attacks. This issue is being tracked by Cisco Bug ID CSCvq29891. Technologi...