CVE-2019-12622
Description
A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient permission restrictions on a specific process. An attacker could exploit this vulnerability by logging in to an affected device with remote support credentials and initiating the specific process on the device and sending crafted data to that process. A successful exploit could allow the attacker to write files to the underlying file system with root privileges.
How to fix
- cisco roomos9.8.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco roomos | v ≤ 9.7.2, 9.7.3 < v < 9.8.0 | 9.8.0 |
| cisco telepresence_codec_c40_firmware | No range specified | — |
| cisco telepresence_codec_c60_firmware | No range specified | — |
| cisco telepresence_codec_c90_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.