CVE-2023-20002
Severity Score
4.4
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device.
This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to a user of the web application. A successful exploit could allow the attacker to send arbitrary network requests that are sourced from the affected system.
Una vulnerabilidad en Cisco TelePresence CE y el software RoomOS podría permitir que un atacante local autenticado evite los controles de acceso y realice un ataque SSRF a través de un dispositivo afectado. Esta vulnerabilidad se debe a una validación inadecuada de la entrada proporcionada por el usuario. Un atacante podría aprovechar esta vulnerabilidad enviando una solicitud manipulada a un usuario de la aplicación web. Un exploit exitoso podría permitir al atacante enviar solicitudes de red arbitrarias provenientes del sistema afectado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-10-27 CVE Reserved
- 2023-01-19 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-918: Server-Side Request Forgery (SSRF)
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Roomos Search vendor "Cisco" for product "Roomos" | 10.3.2.0 Search vendor "Cisco" for product "Roomos" and version "10.3.2.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Roomos Search vendor "Cisco" for product "Roomos" | 10.3.4.0 Search vendor "Cisco" for product "Roomos" and version "10.3.4.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Roomos Search vendor "Cisco" for product "Roomos" | 10.8.2.5 Search vendor "Cisco" for product "Roomos" and version "10.8.2.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Roomos Search vendor "Cisco" for product "Roomos" | 10.8.4.0 Search vendor "Cisco" for product "Roomos" and version "10.8.4.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Roomos Search vendor "Cisco" for product "Roomos" | 10.11.3.0 Search vendor "Cisco" for product "Roomos" and version "10.11.3.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Roomos Search vendor "Cisco" for product "Roomos" | 10.11.5.2 Search vendor "Cisco" for product "Roomos" and version "10.11.5.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Roomos Search vendor "Cisco" for product "Roomos" | 10.15.3.0 Search vendor "Cisco" for product "Roomos" and version "10.15.3.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 8.1.1 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "8.1.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 8.3.0 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "8.3.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 8.3.5 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "8.3.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.0.1 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.0.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.1.1 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.1.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.1.2 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.1.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.1.3 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.1.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.1.4 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.1.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.1.5 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.1.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.1.6 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.1.6" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.2.1 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.2.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.2.2 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.2.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.2.3 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.2.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.2.4 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.2.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.9.3 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.9.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.9.4 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.9.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.10.1 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.10.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.10.2 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.10.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.10.3 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.10.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.12.3 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.12.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.12.4 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.12.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.12.5 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.12.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.13.0 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.13.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.13.1 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.13.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.13.2 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.13.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.13.3 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.13.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.14.3 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.14.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.14.4 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.14.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.14.5 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.14.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.14.6 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.14.6" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.15.0.10 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.15.0.10" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.15.0.11 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.15.0.11" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.15.3.25 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.15.3.25" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.15.3.26 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.15.3.26" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Telepresence Collaboration Endpoint Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" | 9.15.10.8 Search vendor "Cisco" for product "Telepresence Collaboration Endpoint" and version "9.15.10.8" | - |
Affected
| ||||||