PT-2022-6307 · Cisco · Cisco Touch 10+2

Published 2022-10-05 · Updated 2025-07-30 · CVE-2022-20793

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices (affected versions not specified)

Description A vulnerability in the pairing process could allow an unauthenticated, remote attacker to impersonate a legitimate device and pair with an affected device due to insufficient identity verification. An attacker could exploit this by responding to the pairing broadcast from an affected device, potentially allowing access to the device while impersonating a legitimate one.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-325

Related Identifiers

BDU:2023-00802

CVE-2022-20793

Affected Products

Cisco Telepresence Ce

Cisco Touch 10

Roomos

References · 8

• https://osv.dev/vulnerability/CVE-2022-20793 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CTT-IVV-4A66Dsfj · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00802 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20793 · Security Note
• https://t.me/cveNotify/130290 · Telegram Post
• https://feedly.com/cve/CVE-2022-20793 · Note
• https://vuldb.com/?ctiid.210194 · Note
• https://twitter.com/CVEnew/status/1857448643323719710 · Twitter Post