1. Home
  2. CVE Database
  3. CVE-2019-12622
MEDIUM · 5.5

CVE-2019-12622

A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient permiss...

Vulnerability Description

A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient permission restrictions on a specific process. An attacker could exploit this vulnerability by logging in to an affected device with remote support credentials and initiating the specific process on the device and sending crafted data to that process. A successful exploit could allow the attacker to write files to the underlying file system with root privileges.

CVSS Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
CiscoTelepresence Codec C40 Firmware-
CiscoTelepresence Codec C40-
CiscoTelepresence Codec C60 Firmware-
CiscoTelepresence Codec C60-
CiscoTelepresence Codec C90 Firmware-
CiscoTelepresence Codec C90-
CiscoRoomos<= 9.7.2

Related Weaknesses (CWE)

CWE-275

References

FAQ

What is CVE-2019-12622?

CVE-2019-12622 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient permiss...

How severe is CVE-2019-12622?

CVE-2019-12622 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-12622?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Telepresence Codec C40 Firmware, Cisco Telepresence Codec C40, Cisco Telepresence Codec C60 Firmware, Cisco Telepresence Codec C60, Cisco Telepresence Codec C90 Firmware.