Cisco TelePresence CE Local Privilege Escalation via CLI Access
CVE-2023-20090 Published on November 15, 2024

Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability
A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI commands. An attacker could exploit this vulnerability by running a series of crafted commands. A successful exploit could allow the attacker to elevate privileges to root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

NVD

Vulnerability Analysis

CVE-2023-20090 is exploitable with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.

Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH

Weakness Type

Path Traversal: 'dir/../../filename'

The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize multiple internal "../" sequences that can resolve to a location that is outside of that directory.


Products Associated with CVE-2023-20090

stack.watch emails you whenever new vulnerabilities are published in Cisco Telepresence Collaboration Endpoint or Cisco Roomos. Just hit a watch button to start following.

Cisco Telepresence Collaboration Endpoint
 
Cisco Roomos
 

Affected Versions

Cisco RoomOS Software: Cisco TelePresence Endpoint Software (TC/CE): cisco telepresence_collaboration_endpoint: cisco telepresence_collaboration_endpoint:

Exploit Probability

EPSS
0.05%
Percentile
15.60%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.