CVE-2022-20783 — Vulnetix

CVE-2022-20783 PUBLISHED CVSS 7.5 HIGH

A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted H.323 traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to either reboot normally or reboot into maintenance mode, which could result in a DoS condition on the device.

EPSS 0.41% · 61.6th percentile

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

0.41%

61.6th percentile

Affected Products

Vendor	Product	Versions
cisco	roomos	0
cisco	telepresence_collaboration_endpoint	10.0.0.0, 0
Cisco	Cisco RoomOS Software	n/a

Exploit Intelligence

20220420 Cisco TelePresence Collaboration Endpoint and RoomOS Software H.323 Denial of Service Vulnerability (circl)
nids_rules.yar (github-yara)
nids_rules.yar (github-yara)
nids_rules.yar (github-yara)
nids_rules.yar (github-yara)
Spring4Shell.yara (github-yara)
Spring4Shell.yara (github-yara)
Spring4Shell.yara (github-yara)
Spring4Shell.yara (github-yara)
spring_core_rce.yara (github-yara)

…and 15 more exploits

Timeline

Apr 7, 2022 PoC Published
Apr 21, 2022 CVE Published
Apr 22, 2022 EPSS Score
Jun 11, 2022 EPSS Score
Aug 1, 2022 EPSS Score
Sep 20, 2022 EPSS Score
Nov 9, 2022 EPSS Score
Feb 17, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Apr 8, 2023 EPSS Score
May 27, 2023 EPSS Score
Jul 16, 2023 EPSS Score

References

Open in Interactive Console →