Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.19:*:*:*:*:*:*:*

part: a version: 9.15.3.19 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductTelepresence Collaboration Endpoint (6b0b044e-2777-536f-aac2-c64710400f20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-20090 vulnerable 2026-06-08 05:52:39.810637 Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability
MEDIUM (6.7)
A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI commands. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Published: 2024-11-15T15:19:09.891Z
Updated: 2024-11-15T17:15:43.778Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-20793 vulnerable 2026-06-08 05:39:54.856266 Cisco Touch 10 Device Insufficient Identity Verification Vulnerability
MEDIUM (6.8)
A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to insufficient identity verification. An attacker could exploit this vulnerability by impersonating a legitimate device and responding to the pairing broadcast from an affected device. A successful exploit could allow the attacker to access the affected device while impersonating a legitimate device.There are no workarounds that address this vulnerability.
Published: 2024-11-15T15:34:33.919Z
Updated: 2024-11-15T21:12:23.388Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.