CVE-2026-20302— Cisco RoomOS Stack Overflow Vulnerability
Possible ATT&CK Techniques 3AI
T1001 · Data Obfuscation T1055 · Process Injection T1059 · Command and Scripting InterpreterAffected Version Matrix 72
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco RoomOS Software | RoomOS 10.11.2.2 | affected |
RoomOS 10.15.2.2 | affected | ||
RoomOS 11.5.4.6 | affected | ||
RoomOS 11.5.2.4 | affected | ||
RoomOS 10.8.2.5 | affected | ||
RoomOS 10.11.5.2 | affected | ||
RoomOS 10.11.3.0 | affected | ||
RoomOS 10.15.5.3 | affected | ||
| … +64 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-20302
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco RoomOS Stack Overflow Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This vulnerability is due to insufficient boundary checks for specific data that is provided through the USB driver. An attacker could exploit this vulnerability by connecting a malicious USB device to an affected device. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system and execute arbitrary code with root privileges.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco RoomOS Software 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco RoomOS Software是美国Cisco公司的一款视频会议软件。 Cisco RoomOS Software存在缓冲区错误漏洞，该漏洞源于USB驱动程序中特定数据的边界检查不足，可能导致未经身份验证的本地攻击者通过物理访问USB端口连接恶意USB设备，造成缓冲区溢出并以root权限执行任意代码。以下版本受到影响：RoomOS 10.11.2.2版本、RoomOS 10.15.2.2版本、RoomOS 11.5.4.6版本、RoomOS 11.5.2.4版本、RoomOS 10.8.2.5
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco RoomOS Software | RoomOS 10.11.2.2 | - |
II. Public POCs for CVE-2026-20302
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-20302
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-20302 (1)
Same Patch Batch · Cisco · 2026-08-19 · 15 CVEs total
| CVE-2026-20030 | 10.0 CRITICAL | Cisco Crosswork Security Hardening Release: August 2026 |
| CVE-2026-20358 | 10.0 CRITICAL | Cisco Crosswork Security Hardening Release: August 2026 |
| CVE-2026-20357 | 10.0 CRITICAL | Cisco Crosswork Security Hardening Release: August 2026 |
| CVE-2026-20317 | 10.0 CRITICAL | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentic |
| CVE-2026-20315 | 10.0 CRITICAL | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Co |
| CVE-2026-20231 | 9.9 CRITICAL | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutraliz |
| CVE-2026-20359 | 9.9 CRITICAL | Cisco Crosswork Security Hardening Release: August 2026 |
| CVE-2026-20318 | 9.6 CRITICAL | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Val |
| CVE-2026-20319 | 7.5 HIGH | Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management |
| CVE-2026-20320 | 7.5 HIGH | Cisco BroadWorks OCI解析器XEE漏洞 |
| CVE-2026-20327 | 6.5 MEDIUM | Cisco Unified Intelligence Center SQL Injection Vulnerability |
| CVE-2026-20232 | 5.4 MEDIUM | Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability |
| CVE-2026-20177 | 5.3 MEDIUM | Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability |
| CVE-2026-20314 | 5.0 MEDIUM | Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server- |
IV. Related Vulnerabilities
Same product: Cisco RoomOS Software
- CVE-2026-20289
Cisco RoomOS Logging Subsystem Information Disclosure Vulner - CVE-2026-20187
Cisco RoomOS Security Hardening Release - Exceptional Condit - CVE-2026-20158
Cisco RoomOS Security Hardening Release - Resource Lifetime - CVE-2026-20153
Cisco RoomOS Security Hardening Release - Input Validation V - CVE-2026-20157
Cisco RoomOS Security Hardening Release - Missing Encryption
Same vendor: Cisco
- CVE-2026-20320
Cisco BroadWorks OCI解析器XEE漏洞 - CVE-2026-20327
Cisco Unified Intelligence Center SQL Injection Vulnerabilit - CVE-2026-20314
Cisco Packaged Contact Center Enterprise & Cisco Unified Con - CVE-2026-20319
Cisco Secure Workload Software Security Hardening Release Au - CVE-2026-20315
Cisco Secure Workload Software Security Hardening Release Au
Same weakness: CWE-120
- CVE-2026-68768
hashcat through 7.1.2 Heap Buffer Overflow in outfile_write( - CVE-2026-17040
Vulnerabilities in IBM AIX and PowerVM VIOS - CVE-2026-18280
Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Executio - CVE-2026-18279
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execu - CVE-2026-14970
Vulnerabilities in IBM AIX and PowerVM VIOS
V. Comments for CVE-2026-20302
No comments yet