CVE-2023-20092

Summary

CVE-2023-20092 refers to three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS. These issues allow authenticated, local attackers to overwrite arbitrary files on the affected device by exploiting improper access controls on local files. To do so, an attacker would need to have a remote support user account and place a symbolic link in a specific location on the local file system. These vulnerabilities do not affect Cisco DX70, DX80, TelePresence MX Series, or TelePresence SX Series devices. Cisco has issued software updates to address these vulnerabilities, and there are currently no workarounds available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.