CVE-2022-20764: Cisco Roomos

High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destination. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Roomos: before 2021-05 (fixed in 2021-05)
• Cisco Telepresence Collaboration Endpoint: before 10.8.2.5 (fixed in 10.8.2.5)

Published 2022-05-04. Last modified 2026-06-17.