Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

33 records in Roomos · all components

Priority MEDIUM 44

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestrict…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01746 Published 2019-11-26 No fix listed CWE-20
Priority MEDIUM 42

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (Do…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01428 Published 2022-04-21 No fix listed CWE-1287
Priority MEDIUM 42

Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01374 Published 2020-09-23 No fix listed CWE-20
Priority MEDIUM 40

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00424 Published 2026-07-15 No fix listed CWE-284
Priority LOW 38

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem to cause a denial of…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02074 Published 2020-06-18 No fix listed CWE-78
Priority LOW 37

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive d…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01031 Published 2022-05-04 No fix listed CWE-601
Priority LOW 33

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00797 Published 2022-10-26 No fix listed CWE-200
Priority LOW 32

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00482 Published 2022-10-26 No fix listed CWE-200
Priority LOW 32

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an…

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00482 Published 2022-10-26 No fix listed CWE-200
Priority LOW 32

A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair wi…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.0045 Published 2024-11-15 No fix listed CWE-325
Priority LOW 32

A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underly…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01432 Published 2021-05-06 No fix listed CWE-22
TI-2023-06717 CVE-2023-20008 · GHSA-m6pp-3qrg-p5x2

Link following in Cisco RoomOS Software

Priority LOW 31

A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00199 Published 2023-01-19 No fix listed CWE-59
Priority LOW 30

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive d…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00748 Published 2022-05-04 No fix listed CWE-601
Priority LOW 30

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.0054 Published 2022-10-26 No fix listed CWE-200
Priority LOW 29

A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00331 Published 2026-08-05 No fix listed CWE-532
Priority LOW 25

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00479 Published 2022-10-26 No fix listed CWE-200
Priority LOW 24

A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00262 Published 2019-08-21 Fixed in ce-9.7.3 CWE-275
Load more
Open these records in search →