Логотип exploitDog
bind:CVE-2022-20931
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-20931

Количество 3

Количество 3

nvd логотип

CVE-2022-20931

около 1 года назад

A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older version of the software on an affected device. This vulnerability is due to insufficient version control. An attacker could exploit this vulnerability by installing an older version of Cisco TelePresence CE Software on an affected device. A successful exploit could allow the attacker to take advantage of vulnerabilities in older versions of the software.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS3: 6.5
EPSS: Низкий
github логотип

GHSA-92gj-2wf7-h87v

около 1 года назад

A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older version of the software on an affected device. This vulnerability is due to insufficient version control. An attacker could exploit this vulnerability by installing an older version of Cisco TelePresence CE Software on an affected device. A successful exploit could allow the attacker to take advantage of vulnerabilities in older versions of the software.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS3: 6.5
EPSS: Низкий
fstec логотип

BDU:2023-02991

больше 3 лет назад

Уязвимость микропрограммного обеспечения устройства управления конференц-связью Cisco TelePresence Collaboration Endpoint (CE), связанная с недостатками разграничения доступа к репозиторию с контролем версий, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных

CVSS3: 6.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-20931

A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older version of the software on an affected device. This vulnerability is due to insufficient version control. An attacker could exploit this vulnerability by installing an older version of Cisco TelePresence CE Software on an affected device. A successful exploit could allow the attacker to take advantage of vulnerabilities in older versions of the software.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS3: 6.5
0%
Низкий
около 1 года назад
github логотип
GHSA-92gj-2wf7-h87v

A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older version of the software on an affected device. This vulnerability is due to insufficient version control. An attacker could exploit this vulnerability by installing an older version of Cisco TelePresence CE Software on an affected device. A successful exploit could allow the attacker to take advantage of vulnerabilities in older versions of the software.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

CVSS3: 6.5
0%
Низкий
около 1 года назад
fstec логотип
BDU:2023-02991

Уязвимость микропрограммного обеспечения устройства управления конференц-связью Cisco TelePresence Collaboration Endpoint (CE), связанная с недостатками разграничения доступа к репозиторию с контролем версий, позволяющая нарушителю получить доступ на чтение, изменение или удаление данных

CVSS3: 6.5
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу