CVE-2022-20807 MEDIUM

CVE-2022-20807: Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Vendor Cisco
Product Cisco TelePresence Video Communication Server (VCS) Expressway
Weakness CWE-532 · Sensitive info in logs
Published May 27, 2022
Last update November 6, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Key dates

02Disclosure timeline

May 27, 2022 CVE published
November 6, 2024 Record updated