CVE-2019-15274

CVE-2019-15274 is a command injection vulnerability in the CLI of Cisco TelePresence Collaboration Endpoint (CE) Software. An authenticated, local attacker with administrative privileges can exploit insufficient input validation to execute arbitrary code from the underlying filesystem. This vulnerability has a CVSS score of 6.7 (Medium) due to its high impact on confidentiality, integrity, and availability, though it requires high privileges and local access. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.