What is CVE-2020-3143?

CVE-2020-3143 is a high-severity vulnerability in Cisco Telepresence Tc Software, classified under Path Traversal. CVSS score: 7.2/10. Published 2020-09-23.

How severe is CVE-2020-3143?

High severity. CVSS v3 base score is 7.2 out of 10.

Path Traversal in Cisco Telepresence Tc Software

CVE-2020-3143

A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software, Cisco TelePresence Codec (TC) Software, and Cisco RoomOS Software could allow an authenticated, remote attacker to conduct directo…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.085 (94.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Telepresence Tc Software — versions n/a
Cisco Ex60
Cisco Ex60_firmware
Cisco Ex90
Cisco Ex90_firmware
Cisco Sx10
Cisco Sx10_firmware
Cisco Sx20
Cisco Sx20_firmware
Cisco Sx80

Weakness classification (CWE)

CWE-22 — Path Traversal

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3143?: CVE-2020-3143 is a high-severity vulnerability in Cisco Telepresence Tc Software, classified under Path Traversal. CVSS score: 7.2/10. Published 2020-09-23.
How severe is CVE-2020-3143?: High severity. CVSS v3 base score is 7.2 out of 10.