CVE-2019-15962

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.

Link	Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-tele-ce-filewrite	Vendor Advisory

Configuration 1

---

Published : 2019-10-16 07:15

Updated : 2019-10-22 01:14

---

NVD link : CVE-2019-15962

Mitre link : CVE-2019-15962

Cisco

Telepresence Collaboration Endpoint

Webex Board 55

Webex Board 55s

Webex Board 70

Webex Board 70s

Webex Board 85s

Webex Room 55

Webex Room 55 Dual

Webex Room 70 Dual

Webex Room 70 Dual G2

Webex Room 70 Single

Webex Room 70 Single G2

Webex Room Kit

Webex Room Kit Mini

CWE-276

Incorrect Default Permissions