QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-12622

Back to search

CVE-2019-12622

Published: Aug 21, 2019

Modified: Nov 21, 2024

PUBLISHED

CVSS v3.0

4.1

MEDIUM

Description

A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient permission restrictions on a specific process. An attacker could exploit this vulnerability by logging in to an affected device with remote support credentials and initiating the specific process on the device and sending crafted data to that process. A successful exploit could allow the attacker to write files to the underlying file system with root privileges.

VendorProductVersions

Cisco

Cisco TelePresence CE Software

affected
unspecified - < ce-9.7.3

Weaknesses (CWE)

CWE-275

CVSS v3.0 Details

CVSS v3.0 Vector

CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now