Cisco Telepresence Collaboration Endpoint vulnerabilities

31 CVEs affecting Cisco Telepresence Collaboration Endpoint, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20329, published 2025-10-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3336, published 2020-06-18. High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem…
CVE-2019-15288, published 2019-11-26. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE), Cisco TelePresence Codec (TC), and Cisco RoomOS Software could allow an authenticated, remote attacker to escalate…
CVE-2021-1532, published 2021-05-06. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary…
CVE-2022-20783, published 2022-04-21. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the packet processing functionality of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a…
CVE-2019-15289, published 2020-09-23. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an unauthenticated, remote attacker to cause a denial of service…
CVE-2022-20764, published 2022-05-04. High severity, CVSS 8.1. EPSS: 1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS)…
CVE-2022-20768, published 2022-07-06. Medium severity, CVSS 4.9. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software could allow an authenticated, remote attacker to view sensitive information in clear…
CVE-2020-26086, published 2020-11-06. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, remote attacker to gain access to sensitive information on an…
CVE-2022-20794, published 2022-05-04. Medium severity, CVSS 4.7. EPSS: 0.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service (DoS)…
CVE-2020-26068, published 2020-11-18. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the xAPI service of Cisco Telepresence CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to generate an access token for an affected device. The…

Latest

CVE-2025-20329, published 2025-10-15. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the logging component of Cisco TelePresence Collaboration Endpoint (CE) and Cisco RoomOS Software could allow an authenticated, remote attacker to view sensitive information in…
CVE-2023-20094, published 2024-11-15. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco TelePresence CE and RoomOS could allow an unauthenticated, adjacent attacker to view sensitive information on an affected device. This vulnerability exists because the…
CVE-2023-20091, published 2024-11-15. Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. This…
CVE-2023-20090, published 2024-11-15. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to improper access…
CVE-2023-20004, published 2024-11-15. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These…
CVE-2022-20931, published 2024-11-15. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the version control of Cisco TelePresence CE Software for Cisco Touch 10 Devices could allow an unauthenticated, adjacent attacker to install an older version of the…
CVE-2022-20793, published 2024-11-15. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in pairing process of Cisco TelePresence CE Software and RoomOS Software for Cisco Touch 10 Devices could allow an unauthenticated, remote attacker to impersonate a…
CVE-2023-20008, published 2023-01-20. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the CLI of Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to overwrite arbitrary files on the local system of an affected device. This…
CVE-2023-20002, published 2023-01-20. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This…
CVE-2022-20955, published 2022-10-26. High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an attacker to conduct path traversal attacks, view sensitive data, or write…