Cisco Touch 10 Device Insufficient Identity Verification Vulnerability
Priority LOW 32CWE-325Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to insufficient identity verification. An attacker could exploit this vulnerability by impersonating a legitimate device and responding to the pairing broadcast from an affected device. A successful exploit could allow the attacker to access the affected device while impersonating a legitimate device.There are no workarounds that address this vulnerability.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0045 39th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Cisco | Cisco RoomOS Software | N/A | — | No fix listed | CNA |
| Cisco | Cisco TelePresence Endpoint Software (TC/CE) | CE9.10.2; CE9.1.4; CE9.10.3; CE9.1.5; CE9.10.1; CE9.13.0; CE9.1.1; CE9.9.4; CE9.2.1; CE9.1.3; CE9.1.6; CE9.12.3; CE9.13.1; CE9.12.4; CE9.14.3; CE9.14.4; CE9.13.2; CE9.12.5; CE9.14.5; CE9.15.0.10; CE9.15.0.11; CE9.13.3; CE9.15.0.13; CE9.14.6; CE9.15.3.17; CE9.14.7; CE9.15.0.19; CE9.15.3.19; CE9.15.3.18; CE9.0.1; CE9.2.2; CE9.1.2; CE9.9.3; CE9.2.4; CE9.2.3; CE9.15.3.22; CE9.15.8.12; CE9.15.10.8; CE9.15.3.26; CE9.15.3.25; CE9.15.13.0 | — | No fix listed | CNA |
- Cisco RoomOS Software VendorCisco Affected N/A Fixed in — No fix listed CNA
- Cisco TelePresence Endpoint Software (TC/CE) VendorCisco Affected CE9.10.2; CE9.1.4; CE9.10.3; CE9.1.5; CE9.10.1; CE9.13.0; CE9.1.1; CE9.9.4; CE9.2.1; CE9.1.3; CE9.1.6; CE9.12.3; CE9.13.1; CE9.12.4; CE9.14.3; CE9.14.4; CE9.13.2; CE9.12.5; CE9.14.5; CE9.15.0.10; CE9.15.0.11; CE9.13.3; CE9.15.0.13; CE9.14.6; CE9.15.3.17; CE9.14.7; CE9.15.0.19; CE9.15.3.19; CE9.15.3.18; CE9.0.1; CE9.2.2; CE9.1.2; CE9.9.3; CE9.2.4; CE9.2.3; CE9.15.3.22; CE9.15.8.12; CE9.15.10.8; CE9.15.3.26; CE9.15.3.25; CE9.15.13.0 Fixed in — No fix listed CNA
CPE configurations NVD · 42
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.0.1:*:*:*:*:*:*:* | 9.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.1:*:*:*:*:*:*:* | 9.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.2:*:*:*:*:*:*:* | 9.1.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.3:*:*:*:*:*:*:* | 9.1.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.4:*:*:*:*:*:*:* | 9.1.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.5:*:*:*:*:*:*:* | 9.1.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.6:*:*:*:*:*:*:* | 9.1.6 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.1:*:*:*:*:*:*:* | 9.2.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.2:*:*:*:*:*:*:* | 9.2.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.3:*:*:*:*:*:*:* | 9.2.3 | Vulnerable | Cisco |
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.0.1:*:*:*:*:*:*:* Versions 9.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.1:*:*:*:*:*:*:* Versions 9.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.2:*:*:*:*:*:*:* Versions 9.1.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.3:*:*:*:*:*:*:* Versions 9.1.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.4:*:*:*:*:*:*:* Versions 9.1.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.5:*:*:*:*:*:*:* Versions 9.1.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.6:*:*:*:*:*:*:* Versions 9.1.6 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.1:*:*:*:*:*:*:* Versions 9.2.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.2:*:*:*:*:*:*:* Versions 9.2.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.3:*:*:*:*:*:*:* Versions 9.2.3 Vulnerable ·Cisco
Show 32 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.4:*:*:*:*:*:*:* | 9.2.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.3:*:*:*:*:*:*:* | 9.9.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.4:*:*:*:*:*:*:* | 9.9.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.1:*:*:*:*:*:*:* | 9.10.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.2:*:*:*:*:*:*:* | 9.10.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.3:*:*:*:*:*:*:* | 9.10.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.3:*:*:*:*:*:*:* | 9.12.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.4:*:*:*:*:*:*:* | 9.12.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.5:*:*:*:*:*:*:* | 9.12.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.0:*:*:*:*:*:*:* | 9.13.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.1:*:*:*:*:*:*:* | 9.13.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.2:*:*:*:*:*:*:* | 9.13.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.3:*:*:*:*:*:*:* | 9.13.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.3:*:*:*:*:*:*:* | 9.14.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.4:*:*:*:*:*:*:* | 9.14.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.5:*:*:*:*:*:*:* | 9.14.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.6:*:*:*:*:*:*:* | 9.14.6 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.7:*:*:*:*:*:*:* | 9.14.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.10:*:*:*:*:*:*:* | 9.15.0.10 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.11:*:*:*:*:*:*:* | 9.15.0.11 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.13:*:*:*:*:*:*:* | 9.15.0.13 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.19:*:*:*:*:*:*:* | 9.15.0.19 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.17:*:*:*:*:*:*:* | 9.15.3.17 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.18:*:*:*:*:*:*:* | 9.15.3.18 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.19:*:*:*:*:*:*:* | 9.15.3.19 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.22:*:*:*:*:*:*:* | 9.15.3.22 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.25:*:*:*:*:*:*:* | 9.15.3.25 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.26:*:*:*:*:*:*:* | 9.15.3.26 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.8.12:*:*:*:*:*:*:* | 9.15.8.12 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.10.8:*:*:*:*:*:*:* | 9.15.10.8 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.13.0:*:*:*:*:*:*:* | 9.15.13.0 | Vulnerable | Cisco |
| cpe:2.3:o:cisco:roomos:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Cisco |
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.4:*:*:*:*:*:*:* Versions 9.2.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.3:*:*:*:*:*:*:* Versions 9.9.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.4:*:*:*:*:*:*:* Versions 9.9.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.1:*:*:*:*:*:*:* Versions 9.10.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.2:*:*:*:*:*:*:* Versions 9.10.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.3:*:*:*:*:*:*:* Versions 9.10.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.3:*:*:*:*:*:*:* Versions 9.12.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.4:*:*:*:*:*:*:* Versions 9.12.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.5:*:*:*:*:*:*:* Versions 9.12.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.0:*:*:*:*:*:*:* Versions 9.13.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.1:*:*:*:*:*:*:* Versions 9.13.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.2:*:*:*:*:*:*:* Versions 9.13.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.3:*:*:*:*:*:*:* Versions 9.13.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.3:*:*:*:*:*:*:* Versions 9.14.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.4:*:*:*:*:*:*:* Versions 9.14.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.5:*:*:*:*:*:*:* Versions 9.14.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.6:*:*:*:*:*:*:* Versions 9.14.6 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.7:*:*:*:*:*:*:* Versions 9.14.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.10:*:*:*:*:*:*:* Versions 9.15.0.10 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.11:*:*:*:*:*:*:* Versions 9.15.0.11 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.13:*:*:*:*:*:*:* Versions 9.15.0.13 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.19:*:*:*:*:*:*:* Versions 9.15.0.19 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.17:*:*:*:*:*:*:* Versions 9.15.3.17 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.18:*:*:*:*:*:*:* Versions 9.15.3.18 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.19:*:*:*:*:*:*:* Versions 9.15.3.19 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.22:*:*:*:*:*:*:* Versions 9.15.3.22 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.25:*:*:*:*:*:*:* Versions 9.15.3.25 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.26:*:*:*:*:*:*:* Versions 9.15.3.26 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.8.12:*:*:*:*:*:*:* Versions 9.15.8.12 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.10.8:*:*:*:*:*:*:* Versions 9.15.10.8 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.13.0:*:*:*:*:*:*:* Versions 9.15.13.0 Vulnerable ·Cisco
- cpe:2.3:o:cisco:roomos:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-20793
- 2026-10-03 Alias added: GHSA-w4wv-5x8m-w2cf
References
Advisory 1
More Cisco Roomos vulnerabilities
- TI-2019-11399 Cisco TelePresence Collaboration Endpoint, TelePresence Codec, and RoomOS Software Privilege Escalation Vulnerability CVSS 3.1HIGH 8.8
- TI-2026-16365 Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities CVSS 3.1CRITICAL 9.8
- TI-2026-16366 Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities CVSS 3.1CRITICAL 9.8
- TI-2022-05342 Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability CVSS 3.1HIGH 7.5
- TI-2019-11400 Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerabilities CVSS 3.1HIGH 7.5
- TI-2026-16359 Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities CVSS 3.1HIGH 8.8
Sources
- CVE-2022-20793 · CVE Program
- CVE-2022-20793 · NVD
- FIRST EPSS
- GHSA-w4wv-5x8m-w2cf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences