Exposure of Version-Control Repository to an Unauthorized Control Sphere in Cisco TelePresence Collaboration Endpoint (CE) - CVE-2022-20931
Published: October 6, 2022
Vulnerability identifier: #VU67959
CSH Severity: Low
CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-20931
CWE-ID: CWE-527
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to insufficient version control. A remote attacker on the local network can install an older version of the software on the target device and take advantage of vulnerabilities in older versions of the software.
Affected software
Cisco TelePresence Collaboration Endpoint (CE)
How to mitigate CVE-2022-20931
Install updates from vendor's website.
Cisco TelePresence Collaboration Endpoint (CE) - update to 10.15.2.2