CVE-2021-34758: Cisco TelePresence Collaboration Endpoint and RoomOS Software Denial of Service Vulnerability

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-10-06 · updated 2026-06-17
Weakness: CWE-732

Description

A vulnerability in the memory management of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, local attacker to corrupt a shared memory segment, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient access controls to a shared memory resource. An attacker could exploit this vulnerability by corrupting a shared memory segment on an affected device. A successful exploit could allow the attacker to cause the device to reload. The device will recover from the corruption upon reboot.

Affected products

Cisco Roomos: before 10.7.1.2 — fixed in 10.7.1.2
Cisco TelePresence Endpoint Software (TC/CE): before 10.7.2 — fixed in 10.7.2

How to fix

Upgrade to a fixed version: Cisco Roomos 10.7.1.2; Cisco TelePresence Endpoint Software (TC/CE) 10.7.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-34758 or the next vulnerability affects your stack