CVE-2022-20954

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-200 CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Oct 26, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-209557.1Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to con CVE-2022-209568.8A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker CVE-2022-209588.8A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attac CVE-2022-209595.4A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow an authenticated, re CVE-2022-209607.5A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause a CVE-2022-209618.8A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacke CVE-2022-209628.8A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to CVE-2022-209635.4A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker CVE-2022-209648.8A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to inj CVE-2022-209655.4A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to tak CVE-2022-209665.4A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to con CVE-2022-209675.4A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to con