CVE-2023-20091: medium-severity vulnerability in Cisco TelePresence Endpoint Software (TC/CE)
Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.1epss 0.2%
A vulnerability in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device.
This vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device. To exploit this vulnerability, an attacker would need to have a remote support user account.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
Affected products
Cisco · Cisco TelePresence Endpoint Software (TC/CE)Related CVEs — Cisco TelePresence Endpoint Software (TC/CE)
In the same product, most dangerous first.
CVE-2021-1532MEDIUMCisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Read VulnerabilityEPSS 1.4%CVE-2020-26086MEDIUMCisco TelePresence Collaboration Endpoint Software Information Disclosure VulnerabilityEPSS 0.8%CVE-2020-26068MEDIUMCisco Telepresence CE Software and RoomOS Software Unauthorized Token Generation VulnerabilityEPSS 0.7%CVE-2022-20793MEDIUMCisco Touch 10 Device Insufficient Identity Verification VulnerabilityEPSS 0.4%CVE-2026-20119HIGHCisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service VulnerabilityEPSS 0.4%CVE-2022-20931MEDIUMCisco Touch 10 Device Downgrade Attack VulnerabilityEPSS 0.3%