| Package | Affected versions | Patched versions |
|---|---|---|
| telepresence collaboration endpoint | = 9.0.1= 9.1.1= 9.1.2= 9.1.3= 9.1.4= 9.1.5= 9.1.6= 9.10.1= 9.10.2= 9.10.3= 9.12.3= 9.12.4= 9.12.5= 9.13.0= 9.13.1= 9.13.2= 9.13.3= 9.14.3= 9.14.4= 9.14.5= 9.14.6= 9.14.7= 9.15.0.10= 9.15.0.11= 9.15.0.13= 9.15.0.19= 9.15.10.8= 9.15.13.0= 9.15.3.17= 9.15.3.18= 9.15.3.19= 9.15.3.22= 9.15.3.25= 9.15.3.26= 9.15.8.12= 9.2.1= 9.2.2= 9.2.3= 9.2.4= 9.9.3= 9.9.4 |
A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to insufficient identity verification. An attacker could exploit this vulnerability by impersonating a legitimate device and responding to the pairing broadcast from an affected device. A successful exploit could allow the attacker to access the affected device while impersonating a legitimate device.There are no workarounds that address this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free