Description (CNA)
A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device. This vulnerability is due to insufficient identity verification. An attacker could exploit this vulnerability by impersonating a legitimate device and responding to the pairing broadcast from an affected device. A successful exploit could allow the attacker to access the affected device while impersonating a legitimate device.There are no workarounds that address this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco RoomOS Software | affected N/A |
| Cisco / Cisco TelePresence Endpoint Software (TC/CE) | affected CE9.10.2; affected CE9.1.4; affected CE9.10.3; affected CE9.1.5; affected CE9.10.1; affected CE9.13.0; affected CE9.1.1; affected CE9.9.4; affected CE9.2.1; affected CE9.1.3; affected CE9.1.6; affected CE9.12.3; affected CE9.13.1; affected CE9.12.4; affected CE9.14.3; affected CE9.14.4; affected CE9.13.2; affected CE9.12.5; affected CE9.14.5; affected CE9.15.0.10; affected CE9.15.0.11; affected CE9.13.3; affected CE9.15.0.13; affected CE9.14.6; affected CE9.15.3.17; affected CE9.14.7; affected CE9.15.0.19; affected CE9.15.3.19; affected CE9.15.3.18; affected CE9.0.1; affected CE9.2.2; affected CE9.1.2; affected CE9.9.3; affected CE9.2.4; affected CE9.2.3; affected CE9.15.3.22; affected CE9.15.8.12; affected CE9.15.10.8; affected CE9.15.3.26; affected CE9.15.3.25; affected CE9.15.13.0 |
CWE
CWE-325
References
ADP enrichment
No English description supplied.
No references supplied.