Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.

N/A

Permission Issues

Cisco TelePresence Collaboration Endpoint Software 授权问题漏洞

Cisco TelePresence CE Software 9.8.1之前版本中的CLI存在授权问题漏洞，该漏洞源于不正确的权限分配。本地攻击者可利用该漏洞将文件写入到/root目录。以下产品及版本受到影响：Cisco Webex Board 55；Webex Board 55S；Webex Board 70；；Webex Board 70S；Webex Board 85S；Webex Room 55；Webex Room 55 Dual；Webex Room 70 Single；Webex Room

N/A

N/A