5.5
Medium
CVE-2020-26068 A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an…
Description
A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this vulnerability by using the xAPI service to generate a specific token. A successful exploit could allow the attacker to use the generated token to enable experimental features on the device that should not be available to users.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco TelePresence Endpoint Software (TC/CE) | Versions not published |
References
Timeline
- Published
- Last modified
Other CVEs of Cisco TelePresence Endpoint Software (TC/CE)
The 14 CVEs of Cisco TelePresence Endpoint Software (TC/CE) →
CVE-2026-20119
A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco…
7.5
High
CVE-2022-20793
A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10…
6.8
Medium
CVE-2022-20931
A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could…
6.5
Medium
CVE-2023-20004
Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to…
4.4
Medium