Unauthenticated Attacker could Impersonate Legitimate Device and Pair with Affected Device

CVE-2022-20793

What is CVE-2022-20793?

A flaw in the device pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices exposes a significant security risk. This vulnerability arises from inadequate identity verification, permitting an unauthenticated remote attacker to masquerade as a legitimate device. By responding to the pairing broadcast from an affected device, an attacker could establish a connection, gaining unauthorized access. This exploitation highlights the necessity for robust identity verification mechanisms to safeguard against unauthorized pairing attempts. No workarounds are available to mitigate this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References