High severity · published Oct 26, 2022
CVE-2022-20955
Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities
7.1
CVSS
0.5%
EPSS
No
On KEV
Description
Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 42% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CR
Cisco RoomOS Software · Cisco
All versions, or not specified · source: vendor
RO
Roomos · Cisco
All versions, or not specified · source: NVD
TC
Telepresence Collaboration Endpoint · Cisco
before 10.19.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-20955
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-20955
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-trav-beFvCcyu
More from Cisco RoomOS Software
9.8
CVE-2026-20157
Cisco RoomOS Security Hardening Release - Missing Encryption Vulnerabilities
9.8
CVE-2026-20156
Cisco RoomOS Security Hardening Release - Buffer Management Vulnerabilities
8.8
CVE-2026-20150
Cisco RoomOS Security Hardening Release - Access Control Vulnerabilities
8.1
CVE-2022-20764
Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities
7.5
CVE-2026-20187
Cisco RoomOS Security Hardening Release - Exceptional Conditions Handling Vulnerabilities