A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device.

This vulnerability is due to improper access controls on files that are in the local file system. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00151.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco Cisco RoomOS Software affected
Version Status Constraints
RoomOS 10.3.2.0 affected
—
RoomOS 10.3.4.0 affected
—
RoomOS 10.8.2.5 affected
—
RoomOS 10.11.5.2 affected
—
RoomOS 10.8.4.0 affected
—
RoomOS 10.11.3.0 affected
—
RoomOS 10.15.3.0 affected
—
Cisco Cisco TelePresence Endpoint Software (TC/CE) affected
Version Status Constraints
CE9.0.1 affected
—
CE9.1.1 affected
—
CE9.1.2 affected
—
CE9.1.3 affected
—
CE9.1.4 affected
—
CE9.1.5 affected
—
CE9.1.6 affected
—
CE9.10.1 affected
—
CE9.10.2 affected
—
CE9.10.3 affected
—
CE9.12.4 affected
—
CE9.12.5 affected
—
CE9.12.3 affected
—
CE9.13.0 affected
—
CE9.13.1 affected
—
CE9.13.3 affected
—
CE9.13.2 affected
—
CE9.2.1 affected
—
CE9.2.2 affected
—
CE9.2.3 affected
—
CE9.2.4 affected
—
CE9.9.3 affected
—
CE9.9.4 affected
—
CE9.14.3 affected
—
CE9.14.5 affected
—
CE9.14.4 affected
—
CE9.14.6 affected
—
CE9.14.7 affected
—
CE9.15.0.11 affected
—
CE9.15.0.10 affected
—
CE9.15.8.12 affected
—
CE9.15.13.0 affected
—
CE9.15.10.8 affected
—
CE9.15.3.26 affected
—
CE9.15.3.25 affected
—
CE9.15.3.17 affected
—
CE9.15.3.22 affected
—
CE9.15.0.19 affected
—
TC7.3.21 affected
—
RoomOS 10.8.4.0 affected
—
RoomOS 10.11.3.0 affected
—
RoomOS 10.11.5.2 affected
—
RoomOS 10.15.3.0 affected
—
9.15.3.25 affected
—

Configuration 1 [-]

OR cpe:2.3:o:cisco:roomos:10.3.2.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:roomos:10.3.4.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:roomos:10.8.2.5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:roomos:10.8.4.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:roomos:10.11.3.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:roomos:10.11.5.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:roomos:10.15.3.0:*:*:*:*:*:*:*

Configuration 2 [-]

OR cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.0.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.3:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.4:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.10:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.11:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.25:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.3.26:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.8.12:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.10.8:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.13.0:*:*:*:*:*:*:*

Configuration 3 [-]

OR cpe:2.3:a:cisco:telepresence_tc:7.3.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_tc:7.3.6:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_tc:7.3.7:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_tc:7.3.9:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_tc:7.3.13:*:*:*:*:*:*:*
cpe:2.3:a:cisco:telepresence_tc:7.3.21:*:*:*:*:*:*:*

No data.

No data.

Project Subscriptions

Vendors Products
Cisco Subscribe
Roomos Subscribe
Telepresence Collaboration Endpoint Subscribe
Telepresence Tc Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2023-24187 A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to improper access controls on files that are in the local file system. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-dkjGFgRK cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-08-02T08:57:35.552Z

Reserved: 2022-10-27T18:47:50.307Z

Link: CVE-2023-20008

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-01-20T07:15:13.057

Modified: 2024-11-21T07:40:19.863

Link: CVE-2023-20008

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses