CVSS 3.1
4.4 mediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NCVE-2019-15962
Medium (4.4) in cisco telepresence collaboration endpoint. EPSS 0.3% chance of exploitation in the next 30 days.
A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-276, CWE-275
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:telepresence_collaboration_endpoint