Lucene search

CiscoCVE-2021-34758

HistoryOct 06, 2021 - 8:15 p.m.

CVE-2021-34758

2021-10-0620:15:12

CWE-732

cisco

web.nvd.nist.gov

cisco

telepresence

roomos

software

vulnerability

dos

cve-2021-34758

nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

AI Score

4.3

Confidence

High

EPSS

Percentile

5.1%

JSON

A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient access controls to a shared memory resource. An attacker could exploit this vulnerability by corrupting a shared memory segment on an affected device. A successful exploit could allow the attacker to cause the device to reload. The device will recover from the corruption upon reboot.

Affected configurations

Nvd

Node

ciscotelepresence_collaboration_endpointRange<10.7.2

ciscoroomosRange<10.7.1.2

VendorProductVersionCPE
ciscotelepresence_collaboration_endpoint*cpe:2.3:a:cisco:telepresence_collaboration_endpoint:*:*:*:*:*:*:*:*
ciscoroomos*cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	telepresence_collaboration_endpoint	*	cpe:2.3:a:cisco:telepresence_collaboration_endpoint::::::::
cisco	roomos	*	cpe:2.3:o:cisco:roomos::::::::

CNA Affected

[
  {
    "product": "Cisco RoomOS Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tpce-rmos-mem-dos-rck56tT

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

AI Score

4.3

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2021-34758