CVE-2022-20809

Summary

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected Software

VendorProductVersion RangeStatus
CiscoCisco TelePresence Video Communication Server (VCS) Expresswayn/aaffected

Weaknesses

  • CWE-532: CWE-532

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References