CVE-2023-20090: Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability

Description

A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI commands. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack vector

Local

Complexity

Low

Privileges

High

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.2% · higher than 11% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

CR

Cisco RoomOS Software · Cisco

All versions, or not specified · source: vendor

CT

Cisco TelePresence Endpoint Software (TC/CE) · Cisco

CE9.10.2; CE9.1.4; CE9.9.3; CE9.10.3; CE9.1.5; CE9.2.4; +34 more · source: vendor

RO

Roomos · Cisco

10.0.1.2 before 11.1.2.4 · source: NVD

TC

Telepresence Collaboration Endpoint · Cisco

9.0.0.0 before 9.15.17.4 · source: NVD, CISA