CVE-2020-3155

CVE-2020-3155 is a high-severity vulnerability in the SSL implementation of Cisco Intelligent Proximity, affecting Cisco Webex video devices and collaboration endpoints. It allows an unauthenticated, remote attacker to intercept and manipulate shared information due to a lack of SSL certificate validation. An attacker could exploit this via man-in-the-middle (MITM) techniques, potentially viewing or altering presentation content and accessing call controls. The vulnerability has a CVSS score of 7.4 (HIGH) with a network attack vector and high impact on confidentiality and integrity, but requires high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.