Cisco Telepresence Codec c60 Firmware vulnerabilities

3 CVEs affecting Cisco Telepresence Codec c60 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3143, published 2020-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3143, published 2020-09-23. High severity, CVSS 7.2. EPSS: 8.5% chance of exploitation in the next 30 days. A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software, Cisco TelePresence Codec (TC) Software, and Cisco RoomOS Software could allow an…
CVE-2020-3155, published 2020-03-04. High severity, CVSS 7.4. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the SSL implementation of the Cisco Intelligent Proximity solution could allow an unauthenticated, remote attacker to view or alter information shared on Cisco Webex video devices…
CVE-2019-12622, published 2019-08-21. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco RoomOS Software could allow an authenticated, local attacker to write files to the underlying filesystem with root privileges. The vulnerability is due to insufficient…