The vulnerability stems from improper handling of exceptional conditions in Cisco RoomOS, classified as CWE-703. The description does not specify the exact consequences, but such failures can lead to unpredictable system behavior, potentially affecting device operation or availability.

All Cisco RoomOS Software devices running firmware versions that predate the security hardening release are susceptible. The advisory does not list specific models or firmware revisions, so any unpatched RoomOS device is a potential target.

The CVSS score of 7.5 indicates high severity, but the EPSS score of less than 1% suggests that widespread exploitation is unlikely at present. The vulnerability is not cataloged in CISA KEV. No explicit attack vector is documented; the weakness implies that internally triggered exceptional conditions or poorly handled exception flows could be the exploitation path.