A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device.
A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device.
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco RoomOS Software | N/A |
| Cisco | Cisco TelePresence Endpoint Software (TC/CE) | CE9.10.2, CE9.1.4, CE9.9.3, CE9.10.3, CE9.1.5, CE9.2.4, CE9.10.1, CE9.13.0, CE9.1.2, CE9.1.1, CE9.9.4, CE9.2.1, CE9.1.3, CE9.0.1, CE9.1.6, CE9.12.4, CE9.2.2, CE9.12.3, CE9.2.3, CE9.13.1, CE9.14.3, CE9.14.4, CE9.13.2, CE9.12.5, CE9.14.5, CE9.15.0.10, CE9.15.0.11, CE9.13.3, CE9.15.0.13, CE9.14.6, CE9.15.3.17, CE9.14.7, CE9.15.0.19, CE9.15.3.19, CE9.15.3.18, CE9.15.3.22, CE9.15.8.12, CE9.15.10.8, CE9.15.3.26, CE9.15.3.25, CE9.15.13.0, CE9.15.15.4, CE9.15.16.5 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.