csirt@kutim:~/threat-intel/cve/CVE-2022-20793

Katalog CVE

CVSS 6.8 · Medium EPSS 0,43%

Kerentanan Missing Cryptographic Step pada cisco telepresence collaboration endpoint, cisco roomos. Skor CVSS 3.1 6.8 (Medium) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to insufficient identity verification. An attacker could exploit this vulnerability by impersonating a legitimate device and responding to the pairing broadcast from an affected device. A successful exploit could allow the attacker to access the affected device while impersonating a legitimate device.There are no workarounds that address this vulnerability.

Rincian

Terbit di NVD
15 November 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
6.8 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-325: Missing Cryptographic Step
EPSS (30 hari)
0,43% peluang dieksploitasi; lebih tinggi dari 34,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco telepresence collaboration endpoint Versi 9.0.1
cisco telepresence collaboration endpoint Versi 9.1.1
cisco telepresence collaboration endpoint Versi 9.1.2
cisco telepresence collaboration endpoint Versi 9.1.3
cisco telepresence collaboration endpoint Versi 9.1.4
cisco telepresence collaboration endpoint Versi 9.1.5
cisco telepresence collaboration endpoint Versi 9.1.6
cisco telepresence collaboration endpoint Versi 9.2.1
cisco telepresence collaboration endpoint Versi 9.2.2
cisco telepresence collaboration endpoint Versi 9.2.3
cisco telepresence collaboration endpoint Versi 9.2.4
cisco telepresence collaboration endpoint Versi 9.9.3
cisco telepresence collaboration endpoint Versi 9.9.4
cisco telepresence collaboration endpoint Versi 9.10.1
cisco telepresence collaboration endpoint Versi 9.10.2
cisco telepresence collaboration endpoint Versi 9.10.3
cisco telepresence collaboration endpoint Versi 9.12.3
cisco telepresence collaboration endpoint Versi 9.12.4
cisco telepresence collaboration endpoint Versi 9.12.5
cisco telepresence collaboration endpoint Versi 9.13.0
cisco telepresence collaboration endpoint Versi 9.13.1
cisco telepresence collaboration endpoint Versi 9.13.2
cisco telepresence collaboration endpoint Versi 9.13.3
cisco telepresence collaboration endpoint Versi 9.14.3
cisco telepresence collaboration endpoint Versi 9.14.4
cisco telepresence collaboration endpoint Versi 9.14.5
cisco telepresence collaboration endpoint Versi 9.14.6
cisco telepresence collaboration endpoint Versi 9.14.7
cisco telepresence collaboration endpoint Versi 9.15.0.10
cisco telepresence collaboration endpoint Versi 9.15.0.11
cisco telepresence collaboration endpoint Versi 9.15.0.13
cisco telepresence collaboration endpoint Versi 9.15.0.19
cisco telepresence collaboration endpoint Versi 9.15.3.17
cisco telepresence collaboration endpoint Versi 9.15.3.18
cisco telepresence collaboration endpoint Versi 9.15.3.19
cisco telepresence collaboration endpoint Versi 9.15.3.22
cisco telepresence collaboration endpoint Versi 9.15.3.25
cisco telepresence collaboration endpoint Versi 9.15.3.26
cisco telepresence collaboration endpoint Versi 9.15.8.12
cisco telepresence collaboration endpoint Versi 9.15.10.8
cisco telepresence collaboration endpoint Versi 9.15.13.0
cisco roomos Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.