Low severity · published Oct 6, 2021
CVE-2021-34758
Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerability
3.3
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient access controls to a shared memory resource. An attacker could exploit this vulnerability by corrupting a shared memory segment on an affected device. A successful exploit could allow the attacker to cause the device to reload. The device will recover from the corruption upon reboot.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Cisco RoomOS Software · Cisco
All versions, or not specified · source: vendor
RO
Roomos · Cisco
before 10.7.1.2 · source: NVD
TC
Affected product
CR
Cisco RoomOS Software
Cisco
More from Cisco RoomOS Software
9.8
CVE-2026-20157
Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities
9.8
CVE-2026-20156
Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities
8.8
CVE-2026-20150
Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities
8.1
CVE-2022-20764
Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities
7.5
CVE-2026-20187
Cisco RoomOS Security Hardening Release - Exceptional Conditions Handling Vulnerabilities