6.8

CVE-2022-20793: cisco cisco roomos software Missing Cryptographic Step

CVSS: 6.8v3.1MediumAnalyzed
Published 15-11-2024Last modified 15-11-2024
Open JSON

Vulnerability summary

CVE-2022-20793 is a medium (CVSS 6.8) Missing Cryptographic Step vulnerability in cisco cisco roomos software. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 35.3% of scored vulnerabilities.

Overall risk
27/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.8/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.43%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 15-11-2024
    PublishedVulnerability first disclosed.
  2. 15-11-2024
    Last modifiedVulnerability information updated.

Description

A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to insufficient identity verification. An attacker could exploit this vulnerability by impersonating a legitimate device and responding to the pairing broadcast from an affected device. A successful exploit could allow the attacker to access the affected device while impersonating a legitimate device.There are no workarounds that address this vulnerability.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.43%

Chance of exploitation in the next 30 days

Percentile

35%

Versus all other CVEs

30-day change

0.00 pp

From 0.43% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.43%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco4 products
  • cisco roomos softwareN/A
  • cisco telepresence endpoint software (tc/ce)CE9.10.2 | CE9.1.4 | CE9.10.3 | CE9.1.5 | CE9.10.1 | CE9.13.0 | CE9.1.1 | CE9.9.4 | CE9.2.1 | CE9.1.3 | CE9.1.6 | CE9.12.3 | CE9.13.1 | CE9.12.4 | CE9.14.3 | CE9.14.4 | CE9.13.2 | CE9.12.5 | CE9.14.5 | CE9.15.0.10 | CE9.15.0.11 | CE9.13.3 | CE9.15.0.13 | CE9.14.6 | CE9.15.3.17 | CE9.14.7 | CE9.15.0.19 | CE9.15.3.19 | CE9.15.3.18 | CE9.0.1 | CE9.2.2 | CE9.1.2 | CE9.9.3 | CE9.2.4 | CE9.2.3 | CE9.15.3.22 | CE9.15.8.12 | CE9.15.10.8 | CE9.15.3.26 | CE9.15.3.25 | CE9.15.13.0
  • roomosna
  • telepresence_collaboration_endpoint9.0.1 | 9.1.1 | 9.1.2 | 9.1.3 | 9.1.4 | 9.1.5 | 9.1.6 | 9.2.1 | 9.2.2 | 9.2.3 | 9.2.4 | 9.9.3 | 9.9.4 | 9.10.1 | 9.10.2 | 9.10.3 | 9.12.3 | 9.12.4 | 9.12.5 | 9.13.0 | 9.13.1 | 9.13.2 | 9.13.3 | 9.14.3 | 9.14.4 | 9.14.5 | 9.14.6 | 9.14.7 | 9.15.0.10 | 9.15.0.11 | 9.15.0.13 | 9.15.0.19 | 9.15.3.17 | 9.15.3.18 | 9.15.3.19 | 9.15.3.22 | 9.15.3.25 | 9.15.3.26 | 9.15.8.12 | 9.15.10.8 | 9.15.13.0

1 vendor · 4 products

References

1 links