High severity · published Apr 21, 2022
CVE-2022-20783
Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted H.323 traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to either reboot normally or reboot into maintenance mode, which could result in a DoS condition on the device.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Cisco RoomOS Software · Cisco
All versions, or not specified · source: vendor
RO
Roomos · Cisco
before 2022 · source: NVD
TC
Telepresence Collaboration Endpoint · Cisco
before 9.15.10.8; 10.0.0.0 before 10.11.2.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-20783
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-20783
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ce-roomos-dos-c65x2Qf2
More from Cisco RoomOS Software
9.8
CVE-2026-20157
Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities
9.8
CVE-2026-20156
Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities
8.8
CVE-2026-20150
Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities
8.1
CVE-2022-20764
Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities
7.5
CVE-2026-20187
Cisco RoomOS Security Hardening Release - Exceptional Conditions Handling Vulnerabilities
