CVE-2022-20768 Cisco TelePresence Collaboration Endpoint and RoomOS Software Information Disclosure Vulnerability
Authenticated attackers can view unencrypted credentials in audit logs, potentially accessing confidential data and PII.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-20768?
CVE-2022-20768 is a medium-severity vulnerability in Cisco RoomOS Software, published on 6 Jul 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. This vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to access confidential information, some of which may contain personally identifiable information (PII). Note: To access the logs that are stored in the RoomOS Cloud, an attacker would need valid Administrator-level credentials.
Weakness: CWE-532
Which versions are affected by CVE-2022-20768?
It affects 1 product.
Products include Cisco Telepresence Collaboration Endpoint.
How do I fix CVE-2022-20768?
No fix has been published for CVE-2022-20768 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-20768 being exploited?
There is no known exploitation of CVE-2022-20768 in the wild and no public exploit code.
Other vulnerabilities in Cisco RoomOS Software
- CVE-2019-15275 Cisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability
- CVE-2022-20931 Cisco Touch 10 Device Downgrade Attack Vulnerability
- CVE-2019-15274 Cisco TelePresence Collaboration Endpoint Software Command Injection Vulnerability
- CVE-2019-15277 Cisco TelePresence Collaboration Endpoint Software Privilege Escalation Vulnerability
- CVE-2019-15273 Cisco TelePresence Collaboration Endpoint Software Arbitrary File Overwrite Vulnerabilities
Sources
Also known as GHSA-hh3r-h56v-mwcg.