Medium severity · published Nov 15, 2024
CVE-2023-20091
Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability
5.1
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device.
This vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by placing a symbolic link in a specific location on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device. To exploit this vulnerability, an attacker would need to have a remote support user account.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CT
Cisco TelePresence Endpoint Software (TC/CE) · Cisco
CE9.10.2; CE9.1.4; CE9.9.3; CE9.10.3; CE9.1.5; CE9.2.4; +34 more · source: vendor
RO
Roomos · Cisco
10.0.1.2 before 11.1.3.1 · source: NVD
TC
Telepresence Collaboration Endpoint · Cisco
9.0.0.0 before 9.15.17.4 · source: NVD
Affected product
CT
Cisco TelePresence Endpoint Software (TC/CE)
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-20091
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-20091
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-file-write-rHKwegKf
More from Cisco TelePresence Endpoint Software (TC/CE)
7.5
CVE-2026-20119
Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability
7.1
CVE-2023-20008
A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an…
6.8
CVE-2022-20793
Cisco Touch 10 Device Insufficient Identity Verification Vulnerability
6.7
CVE-2023-20090
Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability
6.5
CVE-2022-20931
Cisco Touch 10 Device Downgrade Attack Vulnerability
