CVE-2023-20004

Summary

CVE-2023-20004 refers to three vulnerabilities discovered in the CLI of Cisco TelePresence CE and RoomOS. These vulnerabilities enable an authenticated, local attacker to overwrite arbitrary files on affected devices by exploiting improper access controls. The attacker needs a remote support user account to successfully exploit these vulnerabilities, which could result in significant data loss or system compromise. It is important to note that CVE-2023-20092 does not impact Cisco DX70, DX80, TelePresence MX Series, or TelePresence SX Series devices. Cisco has released software updates to address these vulnerabilities, and there are currently no workarounds available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.