Cisco
Cisco Roomos: vulnerabilidades y CVE
Cisco Roomos tiene 35 vulnerabilidades publicadas, 10 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE35
Últimos 12 meses10
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-20302 | Media (6.1) | 0.18% | — | 19 ago 2026 | A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This… |
| CVE-2026-20289 | Media (6.5) | 0.33% | — | 5 ago 2026 | A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive… |
| CVE-2026-20187 | Alta (7.5) | 0.47% | — | 15 jul 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening… |
| CVE-2026-20158 | Alta (7.5) | 0.47% | — | 15 jul 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening… |
| CVE-2026-20157 | Crítica (9.8) | 0.19% | — | 15 jul 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening… |
| CVE-2026-20156 | Crítica (9.8) | 0.46% | — | 15 jul 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening… |
| CVE-2026-20153 | Alta (7.5) | 0.47% | — | 15 jul 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening… |
| CVE-2026-20150 | Alta (8.8) | 0.42% | — | 15 jul 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening… |
| CVE-2026-20119 | Alta (7.5) | 0.38% | — | 4 feb 2026 | A vulnerability in the text rendering subsystem of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… |
| CVE-2025-20329 | Media (4.9) | 0.36% | — | 15 oct 2025 | A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an… |
| CVE-2023-20094 | Media (4.3) | 0.27% | — | 15 nov 2024 | A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. This vulnerability exists because the affected software performs… |
| CVE-2023-20093 | Media (4.4) | 0.19% | — | 15 nov 2024 | Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are… |
| CVE-2023-20092 | Media (4.4) | 0.19% | — | 15 nov 2024 | Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are… |
| CVE-2023-20091 | Media (5.1) | 0.19% | — | 15 nov 2024 | A vulnerability in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. This vulnerability is due to… |
| CVE-2023-20090 | Media (6.7) | 0.21% | — | 15 nov 2024 | A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access control on certain CLI… |
| CVE-2023-20004 | Media (4.4) | 0.19% | — | 15 nov 2024 | Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are… |
| CVE-2022-20793 | Media (6.8) | 0.43% | — | 15 nov 2024 | A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair… |
| CVE-2023-20008 | Alta (7.1) | 0.19% | — | 20 ene 2023 | A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This vulnerability is due to… |
| CVE-2023-20002 | Media (4.4) | 0.16% | — | 20 ene 2023 | A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to… |
| CVE-2022-20955 | Alta (7.1) | 0.44% | — | 26 oct 2022 | Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on… |
| CVE-2022-20954 | Alta (7.1) | 0.44% | — | 26 oct 2022 | Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on… |
| CVE-2022-20953 | Media (5.5) | 0.43% | — | 26 oct 2022 | Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on… |
| CVE-2022-20811 | Alta (7.2) | 0.70% | — | 26 oct 2022 | Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on… |
| CVE-2022-20776 | Media (6.7) | 0.48% | — | 26 oct 2022 | Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on… |
| CVE-2022-20794 | Media (4.7) | 0.75% | — | 4 may 2022 | Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive… |
| CVE-2022-20764 | Alta (8.1) | 1.0% | — | 4 may 2022 | Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive… |
| CVE-2022-20783 | Alta (7.5) | 1.4% | — | 21 abr 2022 | A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service… |
| CVE-2021-34758 | Baja (3.3) | 0.19% | — | 6 oct 2021 | A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in… |
| CVE-2021-1532 | Media (6.5) | 1.4% | — | 6 may 2021 | A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the… |
| CVE-2020-26068 | Media (6.5) | 0.73% | — | 18 nov 2020 | A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The vulnerability is due… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.