VDB

CVE-2021-34758

CVE-2021-34758 PUBLISHED CVSS 4.400000095367432 MEDIUM

A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient access controls to a shared memory resource. An attacker could exploit this vulnerability by corrupting a shared memory segment on an affected device. A successful exploit could allow the attacker to cause the device to reload. The device will recover from the corruption upon reboot.

EPSS 0.11% · 28.2th percentile

Risk Scores

CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
EPSS Score
0.11%
28.2th percentile

Affected Products

VendorProductVersions
ciscoroomos0
ciscotelepresence_collaboration_endpoint0
CiscoCisco RoomOS Softwaren/a

Timeline

  • Oct 6, 2021 CVE Published
  • Oct 7, 2021 EPSS Score
  • Dec 3, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Jan 28, 2022 EPSS Score
  • Mar 26, 2022 EPSS Score
  • May 22, 2022 EPSS Score
  • Jul 19, 2022 EPSS Score
  • Sep 13, 2022 EPSS Score
  • Nov 9, 2022 EPSS Score
  • Jan 5, 2023 EPSS Score
  • Mar 3, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›