CVE-2020-3143: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software, Cisco TelePresence Codec TC Software, and Cisco RoomOS Software could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is...

The vulnerabilities of the xAPI microprogramming software components of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and the operating system Cisco RoomOS allow attackers to gain unauthorized access to protected information and write arbitrary files to the device’s file system.

The vulnerability of the xAPI microprogramming software components of Cisco TelePresence Collaboration Endpoint, Cisco TelePresence Codec, and the operating system Cisco RoomOS exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability can...

PT-2020-1388

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE Software affected versions not specified Cisco TelePresence Codec TC Software affected versions not specified Cisco RoomOS Software affected versions not specified Description A vulnerability in the...

CVE-2019-15288: Improper Input Validation

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE, Cisco TelePresence Codec TC, and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. The vulnerability is due to insufficient input...

PT-2019-3964

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE affected versions not specified Cisco TelePresence Codec TC affected versions not specified Cisco RoomOS Software affected versions not specified Description A vulnerability in the CLI of Cisco...

CVE-2019-1878: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the Cisco Discovery Protocol CDP implementation for the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, adjacent attacker to inject arbitrary shell commands that are executed by the device. The vulnerability is due to...

PT-2019-2438

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Codec TC and Collaboration Endpoint CE Software affected versions not specified Description A vulnerability in the Cisco Discovery Protocol CDP implementation could allow an unauthenticated, adjacent attacker to inject...

Cisco TelePresence Codec Remote Detection

Detects the installed version of Cisco TelePresence Codec. This script sends an HTTP GET request and tries to ensure the presence of Cisco TelePresence Codec. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

PT-2017-2259

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Codec Software versions prior to 7.3.8 Cisco Collaboration Endpoint CE Software versions prior to 8.3.0 Description The issue is related to errors in resource management within the Session Initiation Protocol SIP of the...

CVE-2017-6648: Undefined Security Weakness

A vulnerability in the Session Initiation Protocol SIP of the Cisco TelePresence Codec TC and Collaboration Endpoint CE Software could allow an unauthenticated, remote attacker to cause a TelePresence endpoint to reload unexpectedly, resulting in a denial of service DoS condition. The vulnerabili...