Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2023-20090

Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI commands. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco RoomOS Software

  • N/Aaffected

Cisco Cisco TelePresence Endpoint Software (TC/CE)

Default version status: unknown

  • CE9.10.2affected
  • CE9.1.4affected
  • CE9.9.3affected
  • CE9.10.3affected
  • CE9.1.5affected
  • CE9.2.4affected
  • CE9.10.1affected
  • CE9.13.0affected
  • CE9.1.2affected
  • CE9.1.1affected
  • CE9.9.4affected
  • CE9.2.1affected
  • CE9.1.3affected
  • CE9.0.1affected
  • CE9.1.6affected
  • CE9.12.4affected
  • CE9.2.2affected
  • CE9.12.3affected
  • CE9.2.3affected
  • CE9.13.1affected
  • CE9.14.3affected
  • CE9.14.4affected
  • CE9.13.2affected
  • CE9.12.5affected
  • CE9.14.5affected
  • CE9.15.0.10affected
  • CE9.15.0.11affected
  • CE9.13.3affected
  • CE9.15.0.13affected
  • CE9.14.6affected
  • CE9.15.3.17affected
  • CE9.14.7affected
  • CE9.15.0.19affected
  • CE9.15.3.19affected
  • CE9.15.3.18affected
  • CE9.15.3.22affected
  • CE9.15.8.12affected
  • CE9.15.10.8affected
  • CE9.15.3.26affected
  • CE9.15.3.25affected
  • CE9.15.13.0affected
  • CE9.15.15.4affected
  • CE9.15.16.5affected

References