Buffer overflow in Cisco Roomos Software
CVE-2026-20302
A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary code with root privileges. This vulnerability is due to insufficient boundary checks for specific data that is provided through the USB driver. An attacker could exploit this vulnerability by connecting a malicious USB device to an affected device. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system and execute arbitrary code with root privileges.
Vulnerability class: Buffer Overflow
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Cisco Roomos Software — versions RoomOS 10.11.2.2, RoomOS 10.11.3.0, RoomOS 10.11.4.1
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-20302?
- CVE-2026-20302 is a medium-severity vulnerability in Cisco Roomos Software, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 6.1/10. Published 2026-08-19.
- How severe is CVE-2026-20302?
- Medium severity. CVSS v3 base score is 6.1 out of 10.