CVE-2021-34758
published 2021-10-06CVE-2021-34758: A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated…
low3.3CVSS 3.1
AVLACLPRLUINSUCNINAL
A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient access controls to a shared memory resource. An attacker could exploit this vulnerability by corrupting a shared memory segment on an affected device. A successful exploit could allow the attacker to cause the device to reload. The device will recover from the corruption upon reboot.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_roomos_software | — | — |
| cisco | roomos | < 10.7.1.2 | 10.7.1.2 |
| cisco | telepresence_collaboration_endpoint | < 10.7.2 | 10.7.2 |
| cisco | telepresence_collaboration_endpoint_and_roomos | — | — |