6.5 Moyenne

CVE-2021-1532 A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco…

Description

A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation of command arguments. An attacker could exploit this vulnerability by sending a crafted command request to the xAPI. A successful exploit could allow the attacker to read the contents of any file that is located on the device filesystem.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco TelePresence Endpoint Software (TC/CE)	Versions non publiées

Références

20210505 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read Vulnerability tools.cisco.com

Chronologie

Publiée 6 mai 2021
Dernière modification 8 novembre 2024

Les 14 CVE de Cisco TelePresence Endpoint Software (TC/CE) →

CVE-2026-20119 A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco… 7.5 Élevée CVE-2022-20793 A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10… 6.8 Moyenne CVE-2022-20931 A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could… 6.5 Moyenne CVE-2023-20004 Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to… 4.4 Moyenne

Suivre cette CVE