CVE-2019-15962

Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability

MEDIUM

4.4

CVSS Score

Published: October 16, 2019 at 06:36 PM UTC

Updated: June 17, 2026 at 02:21 AM UTC

15 products affected across 1 vendorTelepresence Collaboration EndpointWebex Board 70Webex Board 55

Using Cisco TelePresence TC Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco TelePresence TC Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM4.4

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

A vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an authenticated, local attacker to write files to the /root directory of an affected device. The vulnerability is due to improper permission assignment. An attacker could exploit this vulnerability by logging in as the remotesupport user and writing files to the /root directory of an affected device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Telepresence Collaboration Endpoint · Cisco

95%

7.3.18 8.3.7 9.6.4 9.7.2 9.8.0

cisco-webex-board-55 (environment) · cisco-webex-board-55s (environment) · cisco-webex-board-70 (environment) · cisco-webex-board-70s (environment) · cisco-webex-board-85s (environment) · cisco-webex-room-55 (environment) · cisco-webex-room-55-dual (environment) · cisco-webex-room-70-dual (environment) · cisco-webex-room-70-dual-g2 (environment) · cisco-webex-room-70-single (environment) · cisco-webex-room-70-single-g2 (environment) · cisco-webex-room-kit (environment) · cisco-webex-room-kit-mini (environment)

Telepresence Tc · Cisco

60%

All versions

Webex Board 55 · Ciscodevice

80%

All versions

Webex Board 55S · Ciscodevice

80%

All versions

Webex Board 70 · Ciscodevice

80%

All versions