CVE-2022-20764CWE-601

Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities

Medium · published May 4, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destination. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01031 · 63.4th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2022-05-04T17:05Z
EPSS history
Timeline
  • 04 MAY 17:05Z
    Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities
    cvelistv5