CVE-2019-15962 — Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability

Description (CNA)

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco TelePresence TC Software	affected unspecified before n/a

CWE

CWE-275

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-tele-ce-filewrite

ADP enrichment

CVE

No English description supplied.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-tele-ce-filewrite

CISA-ADP

No English description supplied.

No references supplied.