CVE-2019-15277
Medium
Description
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to execute code with root privileges. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by authenticating as the remote support user and sending malicious traffic to a listener who is internal to the device. A successful exploit could allow the attacker to execute commands with root privileges.
SeverityMedium
CVSS6.7
Exploit probability—
Product
Cisco Telepresence Collaboration Endpoint
PublishedOct 16, 2019
First seenOct 16, 2019
Weakness typeCWE-264CWE-264
How to fix
Update
- cisco telepresence_collaboration_endpoint9.8.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco telepresence_collaboration_endpoint | v < 9.8.0 | 9.8.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.