cbcvebase.
CVE-2022-20764
published 2022-05-04

CVE-2022-20764: Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker…

high8.1CVSS 3.1
AVNACLPRLUINSUCHINAH
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destination. For more information about these vulnerabilities, see the Details section of this advisory.

Affected

4 ranges
VendorProductVersion rangeFixed in
ciscocisco_roomos_software
ciscoroomos< 2021-052021-05
ciscotelepresence_collaboration_endpoint< 10.8.2.510.8.2.5
ciscotelepresence_collaboration_endpoint_and_roomos