medium6.5
CVE-2022-20794
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker t…
Impact
Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destination. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Telepresence Collaboration Endpoint | before 9.15.0.11 from 10.0.0.0 before 10.8.2.5 |
| Cisco | Roomos | before 2021-05 |