Vulnerability Details CVE-2021-1532
A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation of command arguments. An attacker could exploit this vulnerability by sending a crafted command request to the xAPI. A successful exploit could allow the attacker to read the contents of any file that is located on the device filesystem.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.9%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.0
Products affected by CVE-2021-1532
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:-
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:7.3.18
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.0.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.0.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.1.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.1.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.2.2
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.2
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.3
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.5
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.6
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:8.3.7
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.0.0.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.0.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.2
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.3
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.4
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.5
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.1.6
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.2
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.10.3
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.2
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.3
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.4
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.12.5
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.2
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.13.3
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.3
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.4
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.14.5
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.15.0.11
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.2
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.3
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.2.4
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.6.4
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.7.2
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.8.0
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.8.1
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.3
-
cpe:2.3:a:cisco:telepresence_collaboration_endpoint:9.9.4
-
-
cpe:2.3:o:cisco:roomos:10.0.1.2
-
cpe:2.3:o:cisco:roomos:10.1.1.2
-
cpe:2.3:o:cisco:roomos:10.2.1.3
-
cpe:2.3:o:cisco:roomos:9.15.0.8
-
cpe:2.3:o:cisco:roomos:9.15.1.11
-
cpe:2.3:o:cisco:roomos:9.15.2.12
-
cpe:2.3:o:cisco:roomos:9.15.3.11
-
cpe:2.3:o:cisco:roomos:9.15.3.13
-
cpe:2.3:o:cisco:roomos:9.15.7.5
-
cpe:2.3:o:cisco:roomos:9.7.2
-
cpe:2.3:o:cisco:roomos:9.7.3
-
cpe:2.3:o:cisco:roomos:9.8.0