Known vulnerabilities in Cisco RoomOS

Vendor: Cisco Systems, Inc
Software: Cisco RoomOS
Software CPE: cpe:2.3:o:cisco_systems:cisco_roomos:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 35
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco RoomOS Cisco RoomOS is affected by 35 known vulnerabilities: 2 high, 13 medium, 20 low Critical High Medium Low

Vulnerabilities (35)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144381 - Buffer overflow
CVE-2026-20302		 CWE-120 Medium
No
No
 11.32.7.0, 26.7.2.2 19.08.2026 SB20260819135
#VU141056 - Information Exposure Through Log Files
CVE-2026-20289		 CWE-532 Low
No
No
 26.7.2.2 06.08.2026 SB2026080637
#VU138376 - Improper Access Control
CVE-2026-20150		 CWE-284 Medium
No
No
 11.32.6.0, 26.5.2.2 17.07.2026 SB2026071795
#VU138377 - Improper input validation
CVE-2026-20153		 CWE-20 Medium
No
No
 11.32.6.0, 26.5.2.2 17.07.2026 SB2026071795
#VU138378 - Memory corruption
CVE-2026-20156		 CWE-119 Medium
No
No
 11.32.6.0, 26.5.2.2 17.07.2026 SB2026071795
#VU138379 - Missing Encryption of Sensitive Data
CVE-2026-20157		 CWE-311 Medium
No
No
 11.32.6.0, 26.5.2.2 17.07.2026 SB2026071795
#VU138380 - Improper control of a resource through its lifetime
CVE-2026-20158		 CWE-664 Medium
No
No
 11.32.6.0, 26.5.2.2 17.07.2026 SB2026071795
#VU138381 - Improper Check or Handling of Exceptional Conditions
CVE-2026-20187		 CWE-703 Medium
No
No
 11.32.6.0, 26.5.2.2 17.07.2026 SB2026071795
#VU122395 - Improper input validation
CVE-2026-20119		 CWE-20 Medium
No
No
 11.27.5.0, 11.32.3.0 05.02.2026 SB2026020567
#VU117300 - Information Exposure Through Log Files
CVE-2025-20329		 CWE-532 Low
No
No
 11.32.2.1 15.10.2025 SB20251015156
#VU75378 - Out-of-bounds read
CVE-2023-20094		 CWE-125 Low
No
No
 - 20.04.2023 SB2023042029
#VU75377 - Improper Access Control
CVE-2023-20091		 CWE-284 Low
No
No
 9.15.17.4 20.04.2023 SB2023042030
#VU75376 - Permissions, Privileges, and Access Controls
CVE-2023-20090		 CWE-264 Low
No
No
 9.15.17.4, 11.1.2.4 20.04.2023 SB2023042030
#VU75375 - Improper Access Control
CVE-2023-20093		 CWE-284 Low
No
No
 - 20.04.2023 SB2023042029
#VU75374 - Improper Access Control
CVE-2023-20092		 CWE-284 Low
No
No
 11.1.2.4 20.04.2023 SB2023042030
#VU75373 - Improper Access Control
CVE-2023-20004		 CWE-284 Low
No
No
 9.15.17.4, 11.1.2.4 20.04.2023 SB2023042030
#VU71113 - Improper Access Control
CVE-2023-20008		 CWE-284 Low
No
No
 - 12.01.2023 SB2023011215
#VU71112 - Server-Side Request Forgery (SSRF)
CVE-2023-20002		 CWE-918 Low
No
No
 - 12.01.2023 SB2023011214
#VU68542 - Improper Access Control
CVE-2022-20954		 CWE-284 Low
No
No
 - 20.10.2022 SB2022102068
#VU68541 - Exposure of sensitive information to an unauthorized actor
CVE-2022-20953		 CWE-200 Low
No
No
 - 20.10.2022 SB2022102068


Showing elements 1 - 20 out of 35