6.8
Moyenne
CVE-2022-20793 A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10…
Description
A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to insufficient identity verification. An attacker could exploit this vulnerability by impersonating a legitimate device and responding to the pairing broadcast from an affected device. A successful exploit could allow the attacker to access the affected device while impersonating a legitimate device.There are no workarounds that address this vulnerability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco RoomOS Software | Versions non publiées | |
| Cisco TelePresence Endpoint Software (TC/CE) | Versions non publiées | |
| roomos | Versions non publiées | |
| telepresence_tc_software | Versions non publiées | |
| telepresence_ce_software | Versions non publiées |
Références
- cisco-sa-CTT-IVV-4A66Dsfj sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco RoomOS Software
Les 28 CVE de Cisco RoomOS Software →
CVE-2026-20302
A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to…
6.1
Moyenne
CVE-2026-20289
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low…
5.7
Moyenne
CVE-2026-20187
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has…
7.5
Élevée
CVE-2026-20158
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has…
7.5
Élevée