We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2021-34758

Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerability



Assignercisco
Reserved2021-06-15
Published2021-10-06
Updated2024-11-07

Description

A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient access controls to a shared memory resource. An attacker could exploit this vulnerability by corrupting a shared memory segment on an affected device. A successful exploit could allow the attacker to cause the device to reload. The device will recover from the corruption upon reboot.



MEDIUM: 4.4CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Product status

Any version
affected

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tpce-rmos-mem-dos-rck56tT (20211006 Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerability) vendor-advisory

cve.org CVE-2021-34758

nvd.nist.gov CVE-2021-34758

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2021-34758
Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.