WID-SEC-W-2023-1043

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Cisco TelePresence: Mehrere Schwachstellen

view advisory published 2023-04-19

Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco TelePresence ausnutzen, um seine Privilegien zu erhöhen, Dateien zu manipulieren oder Informationen offenzulegen.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2023-20094US——
A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. This vulnerability exi…
CVE-2023-20093US——
Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affect…
CVE-2023-20092US——
Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affect…
CVE-2023-20091US——
A vulnerability in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected dev…
CVE-2023-20090US——
A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due t…
CVE-2023-20004US——
Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affect…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan