CVE-2023-20004: Auth Local File Overwrite in Cisco TelePresence CLI
CVE-2023-20004 Published on November 15, 2024

Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Write Vulnerability
Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An attacker could exploit these vulnerabilities by placing a symbolic link in a specific location on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device. To exploit these vulnerabilities, an attacker would need to have a remote support user account. Note: CVE-2023-20092 does not affect Cisco DX70, DX80, TelePresence MX Series, or TelePresence SX Series devices. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

NVD

Vulnerability Analysis

CVE-2023-20004 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Type

What is an insecure temporary file Vulnerability?

The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

CVE-2023-20004 has been classified to as an insecure temporary file vulnerability or weakness.


Products Associated with CVE-2023-20004

stack.watch emails you whenever new vulnerabilities are published in Cisco Telepresence Collaboration Endpoint or Cisco Roomos. Just hit a watch button to start following.

Cisco Telepresence Collaboration Endpoint
 
Cisco Roomos
 

Affected Versions

Cisco RoomOS Software: Cisco TelePresence Endpoint Software (TC/CE):

Exploit Probability

EPSS
0.06%
Percentile
17.40%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.