CVE-2022-20807 — Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Description (CNA)

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected (CNA)

Vendor / product	Versions
Cisco / Cisco TelePresence Video Communication Server (VCS) Expressway	affected n/a

CWE

CWE-532

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV

ADP enrichment

CVE

No English description supplied.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-filewrite-bsFVwueV

CISA-ADP

No English description supplied.

No references supplied.