CVE-2021-1532

CVE-2021-1532 affects Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software via the video endpoint API (xAPI). The issue arises from insufficient path validation of command arguments, allowing an authenticated, remote attacker to read arbitrary files on the device filesystem. A...