Tracker / CVE-2019-15288
CVE-2019-15288
High 8.8
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate privileges to an unrestricted user of the restricted shell. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by including specific arguments when opening an SSH connection to an affected device. A successful exploit could allow the attacker to gain unrestricted user access to the restricted shell of an affected device.
Affected products and versions
| cisco | roomos · … → 2019-09-drop1 |
|---|---|
| cisco | telepresence_codec · … → 7.3.19 |
| cisco | telepresence_collaboration_endpoint · … → 9.8.1 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.