PT-2022-6639 · Cisco · Cisco Telepresence Collaboration Endpoint

Published 2022-10-05 · Updated 2025-07-31 · CVE-2022-20931

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint (CE) versions (affected versions not specified)

Description The issue is related to insufficient access control to the version control repository of the Cisco TelePresence Collaboration Endpoint (CE) software. This could allow a remote attacker to read, modify, or delete data. An unauthenticated, adjacent attacker could exploit this by installing an older version of the software on an affected device, potentially taking advantage of vulnerabilities in those older versions.

Recommendations For all affected versions, update to the latest software version released by Cisco that addresses this issue. As a temporary workaround, consider restricting access to the version control repository to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-527

Related Identifiers

BDU:2023-02991

CVE-2022-20931

Affected Products

Cisco Telepresence Collaboration Endpoint

References · 8

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CTT-DAV-HSvEHHEt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20931 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20931 · Vendor Advisory
• https://cisco.com/c/en/us/support/docs/csa/cisco-sa-CTT-DAV-HSvEHHEt.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02991 · Security Note
• https://t.me/cveNotify/130422 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2022100623 · Note
• https://twitter.com/CVEnew/status/1857448654363120098 · Twitter Post