5.5 Moyenne

CVE-2020-26068 A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an…

Description

A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due to insufficient access authorization. An attacker could exploit this vulnerability by using the xAPI service to generate a specific token. A successful exploit could allow the attacker to use the generated token to enable experimental features on the device that should not be available to users.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco TelePresence Endpoint Software (TC/CE)	Versions non publiées

Références

20201118 Cisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation Vulnerability tools.cisco.com

Chronologie

Publiée 18 novembre 2020
Dernière modification 13 novembre 2024

Les 14 CVE de Cisco TelePresence Endpoint Software (TC/CE) →

CVE-2026-20119 A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco… 7.5 Élevée CVE-2022-20793 A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10… 6.8 Moyenne CVE-2022-20931 A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could… 6.5 Moyenne CVE-2023-20004 Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to… 4.4 Moyenne

Suivre cette CVE