CVE-2022-20955

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write arbitrary files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-200CWE-22

Affected software

No affected versions have been published.

Timeline

Published
Oct 26, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-209568.8A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker CVE-2022-209588.8A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacCVE-2022-209595.4A vulnerability in the External RESTful Services (ERS) API of Cisco Identity Services Engine (ISE) Software could allow an authenticated, reCVE-2022-209607.5A vulnerability in Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated remote attacker to cause aCVE-2022-209618.8A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attackeCVE-2022-209628.8A vulnerability in the Localdisk Management feature of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker toCVE-2022-209635.4A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker CVE-2022-209648.8A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to injCVE-2022-209655.4A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to takCVE-2022-209665.4A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conCVE-2022-209675.4A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to conCVE-2022-209688.8A vulnerability in the Cisco Discovery Protocol processing feature of Cisco IP Phone 7800 and 8800 Series firmware could allow an unauthenti
CVE-2022-20955: High severity, CVSS 7.1 | Vulnix