CVE-2019-15289

CVE-2019-15289 describes multiple denial-of-service vulnerabilities in the video service of Cisco TelePresence Collaboration Endpoint (CE) and RoomOS Software, impacting various Cisco Webex Board models. These vulnerabilities, stemming from insufficient input validation, allow an unauthenticated, remote attacker to crash the video service. Rated 7.5 HIGH, the attack requires no user interaction and has a low attack complexity, leading to a complete loss of availability. While no public exploit code or active exploitation is reported, it has received some community discussion and media coverage.