Cisco TelePresence Collaboration Endpoint 路径遍历漏洞

Cisco TelePresence Collaboration Endpoint CE is a Cisco collaboration endpoint software used in Cisco video conferencing solutions. A path traversal vulnerability exists in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software, which stems from insufficient path validati...

Improper access control

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

CVE-2020-26068

CVE-2020-26068 affects Cisco Telepresence CE Software and Cisco RoomOS Software. A flaw in the xAPI service due to insufficient access authorization allows an authenticated remote attacker to generate an access token for an affected device, potentially enabling experimental features that should n...

CVE-2020-26068: Authorization Bypass Through User-Controlled Key

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this...

PT-2020-4959

Name of the Vulnerable Software and Affected Versions Cisco Telepresence CE Software affected versions not specified Cisco RoomOS Software affected versions not specified Description A vulnerability in the xAPI service could allow an authenticated, remote attacker to generate an access token for ...

CVE-2019-15289

Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerabilities are due to insufficient input validation. A...

Input validation

Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerabilities are due to insufficient input validation. A...

CVE-2019-15289

CVE-2019-15289 affects Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software. The issue is denial-of-service via the video service caused by insufficient input validation, exploitable by unauthenticated remote actors sending crafted traffic to the endpoint’s video service, whic...

CVE-2019-15289: Improper Input Validation

Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerabilities are due to insufficient input validation. A...

CVE-2020-3143: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software, Cisco TelePresence Codec TC Software, and Cisco RoomOS Software could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is...

CVE-2020-3336 Cisco TelePresence Collaboration Endpoint and RoomOS Software Command Injection Vulnerability

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem to cause a denial of service DoS or gain privileged access to the root filesystem. The vulnerabili...

Cisco RoomOS Software and TelePresence Collaboration Endpoint Software Operating System Command Injection Vulnerability

Cisco RoomOS Software and Cisco TelePresence Collaboration Endpoint Software are both products of the U.S. company Cisco Cisco.Cisco RoomOS Software is a set of automatic management software for Cisco devices. The software is mainly used for upgrading and managing the motherboard firmware of Cisc...

CVE-2020-3336: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem to cause a denial of service DoS or gain privileged access to the root filesystem. The vulnerabili...

PT-2020-2867

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software affected versions not specified Description A vulnerability in the software upgrade process could allow an authenticated, remote attacker to modify the filesystem,...

PT-2020-1388

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE Software affected versions not specified Cisco TelePresence Codec TC Software affected versions not specified Cisco RoomOS Software affected versions not specified Description A vulnerability in the...

CVE-2019-15967

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...

Design/Logic Flaw

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...

CVE-2019-15967: Improper Access Control

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software could allow an authenticated, local attacker to enable audio recording without notifying users. The vulnerability is due to the presence of unnecessary debug commands. An attacker could exploit th...

CVE-2019-15288: Improper Input Validation

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint CE, Cisco TelePresence Codec TC, and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. The vulnerability is due to insufficient input...

PT-2019-4327

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE and Cisco RoomOS Software affected versions not specified Description The issue is related to a vulnerability in the CLI of the affected software, which could allow an authenticated, local attacker ...