CVE-2022-20814 Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability
An unauthenticated remote attacker can intercept and alter traffic between Cisco Expressway-C and Unified Communications Manager via a man-in-the-middle attack due to improper certificate validation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-20814?
CVE-2022-20814 is a high-severity vulnerability in Cisco TelePresence Video Communication Server (VCS) Expressway, published on 15 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic. Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Weakness: CWE-295
Which versions are affected by CVE-2022-20814?
It affects 1 product.
Products include Cisco Telepresence Video Communication Server.
How do I fix CVE-2022-20814?
No fix has been published for CVE-2022-20814 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-20814 being exploited?
There is no known exploitation of CVE-2022-20814 in the wild and no public exploit code.
Other vulnerabilities in Cisco TelePresence Video Communication Server (VCS) Expressway
- CVE-2023-20105 Privilege escalation in Cisco TelePresence Video Communication Server (VCS) Expressway
- CVE-2023-20192 Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escalation Vulnerabilities
- CVE-2022-20754 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- CVE-2022-20755 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities
- CVE-2016-1468 Command injection in n/a
Sources
Also known as GHSA-rg5m-fc62-h68h.