Cisco TelePresence Collaboration Endpoint/RoomOS CLI link following

Summaryinfo

A vulnerability was found in Cisco TelePresence Collaboration Endpoint and RoomOS. It has been classified as problematic. Impacted is an unknown function of the component CLI. The manipulation leads to an unknown weakness. This vulnerability is uniquely identified as CVE-2023-20004. Local access is required to approach this attack. No exploit exists. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Cisco TelePresence Collaboration Endpoint and RoomOS (Unified Communication Software) (unknown version). This issue affects an unknown code block of the component CLI. Using CWE to declare the problem leads to CWE-59. The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. Impacted is integrity, and availability. The summary by CVE is:

Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An attacker could exploit these vulnerabilities by placing a symbolic link in a specific location on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device. To exploit these vulnerabilities, an attacker would need to have a remote support user account. Note: CVE-2023-20092 does not affect Cisco DX70, DX80, TelePresence MX Series, or TelePresence SX Series devices. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

The weakness was disclosed 04/19/2023 as cisco-sa-roomos-file-write-rHKwegKf. It is possible to read the advisory at sec.cloudapps.cisco.com. The identification of this vulnerability is CVE-2023-20004 since 10/27/2022. The technical details are unknown and an exploit is not publicly available.

Upgrading eliminates this vulnerability.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Unified Communication Software

Vendor

• Cisco

Name

• RoomOS
• TelePresence Collaboration Endpoint

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion