CVE-2022-20794: Cisco Roomos

Medium severity, CVSS 4.7. EPSS: 0.7% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS) condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destination. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Roomos: before 2021-05 (fixed in 2021-05)
• Cisco Telepresence Collaboration Endpoint: before 9.15.0.11 (fixed in 9.15.0.11); from 10.0.0.0, before 10.8.2.5 (fixed in 10.8.2.5)

Published 2022-05-04. Last modified 2026-06-17.