Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-20783

Опубликовано: 21 апр. 2022
Источник: nvd
CVSS3: 7.5
CVSS2: 7.8
EPSS Низкий

Описание

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted H.323 traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to either reboot normally or reboot into maintenance mode, which could result in a DoS condition on the device.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:telepresence_collaboration_endpoint:*:*:*:*:*:*:*:*
Версия до 9.15.10.8 (исключая)
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:*:*:*:*:*:*:*:*
Версия от 10.0.0.0 (включая) до 10.11.2.2 (исключая)
cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*
Версия до 2022 (исключая)

EPSS

Процентиль: 61%
0.00408
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-1287
CWE-20

Связанные уязвимости

CVSS3: 7.5
github
почти 4 года назад

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted H.323 traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to either reboot normally or reboot into maintenance mode, which could result in a DoS condition on the device.

CVSS3: 7.5
fstec
больше 4 лет назад

Уязвимость функции обработки пакетов микропрограммного обеспечения устройства управления конференц-связью Cisco TelePresence Collaboration Endpoint (CE) и операционной системы Cisco RoomOS, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 61%
0.00408
Низкий

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-1287
CWE-20