CVE-2022-20768— Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
Quick assessment
Affected
Cisco Cisco RoomOS Software
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software都是美国思科（Cisco）公司的产品。Cisco RoomOS Software是一套用于Cisco设备的自动管理软件。该软件主要用于升级、管理Cisco设备的主板固件。Cisco TelePresence Collaboration Endpoint Software是一套协作终端软件。 Cisco TelePresence Collaboration Endp
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-20768
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII). Note: To access the logs that are stored in the RoomOS Cloud, an attacker would need valid Administrator-level credentials.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco TelePresence Collaboration Endpoint Software 和 RoomOS Software 日志信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco RoomOS Software和Cisco TelePresence Collaboration Endpoint Software都是美国思科（Cisco）公司的产品。Cisco RoomOS Software是一套用于Cisco设备的自动管理软件。该软件主要用于升级、管理Cisco设备的主板固件。Cisco TelePresence Collaboration Endpoint Software是一套协作终端软件。 Cisco TelePresence Collaboration Endp
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco RoomOS Software | n/a | - |
|
II. Public POCs for CVE-2022-20768
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-20768
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-20768 (1)
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-roomos-infodisc-YOTz9Ct7 vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2022-07-06 · 10 CVEs total
| CVE-2022-20813 | 9.0 CRITICAL | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities |
| CVE-2022-20812 | 9.0 CRITICAL | Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities |
| CVE-2022-20808 | 7.7 HIGH | Cisco Smart Software Manager On-Prem Denial of Service Vulnerability |
| CVE-2022-20859 | 6.5 MEDIUM | Cisco Unified Communications Products Access Control Vulnerability |
| CVE-2022-20791 | 6.5 MEDIUM | Cisco Unified Communications Products Arbitrary File Read Vulnerability |
| CVE-2022-20815 | 6.1 MEDIUM | Cisco Unified Communications Products Cross-Site Scripting Vulnerability |
| CVE-2022-20800 | 6.1 MEDIUM | Cisco Unified Communications Products Cross-Site Scripting Vulnerability |
| CVE-2022-20752 | 5.3 MEDIUM | Cisco Unified Communications Products Timing Attack Vulnerability |
| CVE-2022-20862 | 4.3 MEDIUM | Cisco Unified Communications Manager Arbitrary File Read Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco RoomOS Software
-
CVE-2026-20302
Cisco RoomOS Stack Overflow Vulnerability -
CVE-2026-20289
Cisco RoomOS Logging Subsystem Information Disclosure Vulner -
CVE-2026-20187
Cisco RoomOS Security Hardening Release - Exceptional Condit -
CVE-2026-20158
Cisco RoomOS Security Hardening Release - Resource Lifetime -
CVE-2026-20153
Cisco RoomOS Security Hardening Release - Input Validation V
Same vendor: Cisco
-
CVE-2026-76472
Cisco Meraki Security Hardening Release October 2026 - Impro -
CVE-2026-76467
Cisco Meraki Software Hardening Release - Resource Lifetime -
CVE-2026-76470
Cisco Meraki Hardening Release - Incorrect Calculation Vulne -
CVE-2026-76469
Cisco Meraki Security Hardening Release: October 2026 Insuff -
CVE-2026-76468
Cisco Meraki Hardening Release - Input Validation Vulnerabil
Same weakness: CWE-532
-
CVE-2026-87980
Security vulnerability affects the UNIX S-TAP component as p -
CVE-2026-87672
Brocade Fabric OS 信息泄露漏洞 -
CVE-2026-16528
ASUS路由器日志注入漏洞，泄露DDNS凭据 -
CVE-2026-106504
Backstage: Sensitive information exposure in scaffolder task -
CVE-2026-106502
Backstage: Sensitive information may be exposed in Scaffolde
V. Comments for CVE-2022-20768
No comments yet