cisco-sa-CTT-DAV-HSvEHHEt

Cisco Touch 10 Devices Downgrade Vulnerability

Advisory ansehen veröffentlicht 2022-10-05

A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older version of the software on an affected device. This vulnerability is due to insufficient version control. An attacker could exploit this vulnerability by installing an older version of Cisco TelePresence CE Software on an affected device. A successful exploit could allow the attacker to take advantage of vulnerabilities in older versions of the software. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2022-20931US	—	0.27% (20th)	—	2024-11-15
A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

Cisco Touch 10 Devices Downgrade Vulnerabilityself
Cisco Security Vulnerability Policyexternal
considering software upgradesexternal
Cisco Security Advisories pageexternal

Behebungen (1)

BehobenCisco TelePresence Endpoint Software (TC/CE)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan