Three Vulnerabilities in CLI of Cisco TelePresence CE and RoomOS Could Allow Local Attacker to Overwrite Arbitrary Files

CVE-2023-20092

Summary

In Cisco TelePresence CE and RoomOS, multiple vulnerabilities exist that can enable an authenticated local attacker to overwrite arbitrary files on the file system of an affected device. These vulnerabilities arise from inadequate access control measures applied to files stored on the local file system. By exploiting these vulnerabilities, an attacker could insert a symbolic link at a designated location, facilitating unauthorized file modifications. To execute this exploit, the attacker must possess a remote support user account. Notably, these vulnerabilities do not impact the Cisco DX70, DX80, TelePresence MX Series, or TelePresence SX Series devices. Cisco has released updates to remediate these issues, and no viable workarounds are available.

References