This vulnerability in Cisco RoomOS Software involves the insertion of sensitive information into log files. An authenticated local attacker with low privileges can enable a particular logging level that causes sensitive data, including user login credentials, to be recorded in system logs. By accessing these logs, the attacker can retrieve sensitive information. The vulnerability does not affect availability or integrity but impacts confidentiality. No official patch or remediation level has been stated by the vendor as of the published date.

An attacker with authenticated local access and low privileges can view sensitive information such as user login credentials by enabling a specific logging level and accessing the system logs. This compromises confidentiality but does not affect system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor logging configurations to prevent enabling sensitive logging levels.