Rewterz Threat Advisory – CVE-2022-20768 – Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerability

Severity

Medium

Analysis Summary

CVE-2022-20768

Cisco TelePresence Collaboration Endpoint and RoomOS Software could allow a remote authenticated attacker to obtain sensitive information, caused by the storage of certain unencrypted credentials. By gaining access to the audit logs, an attacker could exploit this vulnerability to obtain user credentials information, and use this information to launch further attacks against the affected system.

Impact

• Information Theft

Indicators Of Compromise

CVE

• CVE-2022-20768

Affected Vendors

Cisco

Affected Products

• Cisco RoomOS Software
• Cisco TelePresence Collaboration Endpoint Software

Remediation

Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.

Cisco Security Advisory