MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-20090

CVSS 6.7v3.1pub. 2024-11-15upd. 2025-07-30

A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI commands. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Cisco Roomos

    OS
    Cisco
    10.0.1.2 – 11.1.2.4 (bez)

  • Cisco Telepresence Collaboration Endpoint

    APP
    Cisco
    9.0.0.0 – 9.15.17.4 (bez)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2022-20783HIGH7.5ten sam produkt

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Softw...

CVE-2019-15289HIGH7.5ten sam produkt

Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint (CE) and Cisco Room...

CVE-2020-3336HIGH7.2ten sam produkt

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisc...

CVE-2019-15288HIGH8.8ten sam produkt

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), a...

CVE-2025-20329MEDIUM4.9ten sam produkt

A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS So...