CVE-2022-20783

Cisco CVE-2022-20783 is a denial-of-service vulnerability in the packet processing path of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software. The issue stems from insufficient input validation and can be triggered by sending crafted H.323 traffic from an unauthenti...

CVE-2022-20794

CVE-2022-20794 covers multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software. The issues could allow a remote attacker to cause a DoS, view sensitive data on the affected device, or redirect users to an attacker-controlled d...

CVE-2019-15288

The CVE-2019-15288 issue affects Cisco TelePresence CE/TC and RoomOS Software. It stems from insufficient input validation in the CLI, allowing an authenticated, remote attacker to exploit specific SSH arguments to escalate privileges to an unrestricted user in the restricted shell. Documented im...

CVE-2026-20150

CVE-2026-20150 concerns Cisco RoomOS, detailing improper access control (CWE-284). CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; impact: high across confidentiality, integrity, availability; vector: network, no user interaction, low privileges required. A Cisco software hardening release is cite...

CVE-2019-15967

The CVE-2019-15967 issue affects Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software. A vulnerability in the CLI allows an authenticated, local attacker to enable audio recording without user notification by exploiting unnecessary debug commands and gaining unrestricted acces...

CVE-2022-20764

Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software are affected by multiple vulnerabilities in the web engine that can allow a remote attacker to cause a denial of service, disclose sensitive data, or redirect users to attacker-controlled destinations. The Cisco advisory Cis...

CVE-2021-34758

CVE-2021-34758 affects Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software. The issue is in memory management due to insufficient access controls to a shared memory resource, allowing an authenticated local attacker to corrupt a shared memory segment and cause a DoS ...

CVE-2022-20811

CVE-2022-20811 affects Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software. The vulnerability stems from inadequate input validation in the xAPI leading to directory/path traversal, enabling an attacker to read and write arbitrary files on an affected device and pote...

CVE-2022-20776

CVE-2022-20776 affects Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software. The root cause is insufficient validation in the xAPI component, enabling path traversal on affected devices. An authenticated, local attacker could read/write arbitrary files and, per linked...

CVE-2019-12622

Cisco RoomOS Software contains a local privilege-escalation flaw (CVE-2019-12622) caused by insufficient permission restrictions on a specific process. An authenticated, local attacker with remote support credentials can trigger the process to write files to the underlying filesystem with root pr...

CVE-2026-20156

CVE-2026-20156 affects Cisco RoomOS . The issue is described as improper restriction of operations within the bounds of a memory buffer (CWE-119), leading to potential memory corruption. Cisco’s security advisory and related sources indicate a software hardening release that addresses these vulne...

CVE-2021-1532

CVE-2021-1532 affects Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software via the video endpoint API (xAPI). The issue arises from insufficient path validation of command arguments, allowing an authenticated, remote attacker to read arbitrary files on the device filesystem. A...

CVE-2026-20157

CVE-2026-20157 is associated with Cisco RoomOS and concerns missing encryption (CWE-311). The NVD entry states a hardening release in Cisco’s security review addresses multiple internally discovered vulnerabilities, with a client-visible impact of potential disclosure of protected information due...

CVE-2026-20187

Technical details for CVE-2026-20187 are not publicly available in the provided documents. Monitor for updates from Cisco Security Advisory and the CVE database.

CVE-2026-20158

Technical details (affected products, versions, root cause, and exploit information) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-20153

Technical details (affected products/versions, root cause, impact, fixes) are not provided in the supplied documents. Monitor Cisco Security Advisory and CVE entry for updates.