Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability
Priority LOW 36CWE-295Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Spoofing
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-295.
Summary
A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic. Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0091 60th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Cisco | Cisco TelePresence Video Communication Server (VCS) Expressway | X8.11.2; X8.6; X8.11.3; X8.2.2; X8.8.3; X8.11.0; X12.5.2; X8.1.1; X8.9; X12.5.1; X12.5.6; X8.7.3; X12.6.0; X8.11.1; X8.5; X8.9.1; X8.10.2; X8.8.2; X8.5.3; X8.1; X8.9.2; X8.11.4; X12.5.4; X8.8.1; X8.2.1; X8.5.1; X8.6.1; X8.1.2; X8.8; X8.10.0; X12.5.3; X8.10.1; X12.5.7; X8.10.3; X8.7.1; X8.2; X12.5.8; X8.7; X8.5.2; X12.5.9; X12.5.0; X8.10.4; X8.7.2; X12.5.5; X12.6.1; X12.6.2; X12.6.3; X12.6.4; X12.7.0; X12.7.1; X14.0.0; X14.0.1; X14.0.2; X14.0.3; X14.0.4; X14.0.5; X14.0.6; X14.0.7; X14.0.8; X14.0.9 | — | No fix listed | CNA |
- Cisco TelePresence Video Communication Server (VCS) Expressway VendorCisco Affected X8.11.2; X8.6; X8.11.3; X8.2.2; X8.8.3; X8.11.0; X12.5.2; X8.1.1; X8.9; X12.5.1; X12.5.6; X8.7.3; X12.6.0; X8.11.1; X8.5; X8.9.1; X8.10.2; X8.8.2; X8.5.3; X8.1; X8.9.2; X8.11.4; X12.5.4; X8.8.1; X8.2.1; X8.5.1; X8.6.1; X8.1.2; X8.8; X8.10.0; X12.5.3; X8.10.1; X12.5.7; X8.10.3; X8.7.1; X8.2; X12.5.8; X8.7; X8.5.2; X12.5.9; X12.5.0; X8.10.4; X8.7.2; X12.5.5; X12.6.1; X12.6.2; X12.6.3; X12.6.4; X12.7.0; X12.7.1; X14.0.0; X14.0.1; X14.0.2; X14.0.3; X14.0.4; X14.0.5; X14.0.6; X14.0.7; X14.0.8; X14.0.9 Fixed in — No fix listed CNA
CPE configurations NVD · 60
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1:*:*:*:expressway:*:*:* | x8.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1.1:*:*:*:expressway:*:*:* | x8.1.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1.2:*:*:*:expressway:*:*:* | x8.1.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2:*:*:*:expressway:*:*:* | x8.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2.1:*:*:*:expressway:*:*:* | x8.2.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2.2:*:*:*:expressway:*:*:* | x8.2.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5:*:*:*:expressway:*:*:* | x8.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.1:*:*:*:expressway:*:*:* | x8.5.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.2:*:*:*:expressway:*:*:* | x8.5.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.3:*:*:*:expressway:*:*:* | x8.5.3 | Vulnerable | Cisco |
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1:*:*:*:expressway:*:*:* Versions x8.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1.1:*:*:*:expressway:*:*:* Versions x8.1.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.1.2:*:*:*:expressway:*:*:* Versions x8.1.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2:*:*:*:expressway:*:*:* Versions x8.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2.1:*:*:*:expressway:*:*:* Versions x8.2.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.2.2:*:*:*:expressway:*:*:* Versions x8.2.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5:*:*:*:expressway:*:*:* Versions x8.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.1:*:*:*:expressway:*:*:* Versions x8.5.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.2:*:*:*:expressway:*:*:* Versions x8.5.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.5.3:*:*:*:expressway:*:*:* Versions x8.5.3 Vulnerable ·Cisco
Show 50 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.6:*:*:*:expressway:*:*:* | x8.6 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.6.1:*:*:*:expressway:*:*:* | x8.6.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7:*:*:*:expressway:*:*:* | x8.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.1:*:*:*:expressway:*:*:* | x8.7.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.2:*:*:*:expressway:*:*:* | x8.7.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.3:*:*:*:expressway:*:*:* | x8.7.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8:*:*:*:expressway:*:*:* | x8.8 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8.1:*:*:*:expressway:*:*:* | x8.8.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8.2:*:*:*:expressway:*:*:* | x8.8.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8.3:*:*:*:expressway:*:*:* | x8.8.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.9:*:*:*:expressway:*:*:* | x8.9 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.9.1:*:*:*:expressway:*:*:* | x8.9.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.9.2:*:*:*:expressway:*:*:* | x8.9.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.0:*:*:*:expressway:*:*:* | x8.10.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.1:*:*:*:expressway:*:*:* | x8.10.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.2:*:*:*:expressway:*:*:* | x8.10.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.3:*:*:*:expressway:*:*:* | x8.10.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.4:*:*:*:expressway:*:*:* | x8.10.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.0:*:*:*:expressway:*:*:* | x8.11.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.1:*:*:*:expressway:*:*:* | x8.11.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.2:*:*:*:expressway:*:*:* | x8.11.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.3:*:*:*:expressway:*:*:* | x8.11.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.4:*:*:*:expressway:*:*:* | x8.11.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.0:*:*:*:expressway:*:*:* | x12.5.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.1:*:*:*:expressway:*:*:* | x12.5.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.2:*:*:*:expressway:*:*:* | x12.5.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.3:*:*:*:expressway:*:*:* | x12.5.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.4:*:*:*:expressway:*:*:* | x12.5.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.5:*:*:*:expressway:*:*:* | x12.5.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.6:*:*:*:expressway:*:*:* | x12.5.6 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.7:*:*:*:expressway:*:*:* | x12.5.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.8:*:*:*:expressway:*:*:* | x12.5.8 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.9:*:*:*:expressway:*:*:* | x12.5.9 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.0:*:*:*:expressway:*:*:* | x12.6.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.1:*:*:*:expressway:*:*:* | x12.6.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.2:*:*:*:expressway:*:*:* | x12.6.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.3:*:*:*:expressway:*:*:* | x12.6.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.4:*:*:*:expressway:*:*:* | x12.6.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.7.0:*:*:*:expressway:*:*:* | x12.7.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x12.7.1:*:*:*:expressway:*:*:* | x12.7.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.0:*:*:*:expressway:*:*:* | x14.0.0 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.1:*:*:*:expressway:*:*:* | x14.0.1 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.2:*:*:*:expressway:*:*:* | x14.0.2 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.3:*:*:*:expressway:*:*:* | x14.0.3 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.4:*:*:*:expressway:*:*:* | x14.0.4 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.5:*:*:*:expressway:*:*:* | x14.0.5 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.6:*:*:*:expressway:*:*:* | x14.0.6 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.7:*:*:*:expressway:*:*:* | x14.0.7 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.8:*:*:*:expressway:*:*:* | x14.0.8 | Vulnerable | Cisco |
| cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.9:*:*:*:expressway:*:*:* | x14.0.9 | Vulnerable | Cisco |
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.6:*:*:*:expressway:*:*:* Versions x8.6 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.6.1:*:*:*:expressway:*:*:* Versions x8.6.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7:*:*:*:expressway:*:*:* Versions x8.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.1:*:*:*:expressway:*:*:* Versions x8.7.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.2:*:*:*:expressway:*:*:* Versions x8.7.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.7.3:*:*:*:expressway:*:*:* Versions x8.7.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8:*:*:*:expressway:*:*:* Versions x8.8 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8.1:*:*:*:expressway:*:*:* Versions x8.8.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8.2:*:*:*:expressway:*:*:* Versions x8.8.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.8.3:*:*:*:expressway:*:*:* Versions x8.8.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.9:*:*:*:expressway:*:*:* Versions x8.9 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.9.1:*:*:*:expressway:*:*:* Versions x8.9.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.9.2:*:*:*:expressway:*:*:* Versions x8.9.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.0:*:*:*:expressway:*:*:* Versions x8.10.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.1:*:*:*:expressway:*:*:* Versions x8.10.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.2:*:*:*:expressway:*:*:* Versions x8.10.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.3:*:*:*:expressway:*:*:* Versions x8.10.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.10.4:*:*:*:expressway:*:*:* Versions x8.10.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.0:*:*:*:expressway:*:*:* Versions x8.11.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.1:*:*:*:expressway:*:*:* Versions x8.11.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.2:*:*:*:expressway:*:*:* Versions x8.11.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.3:*:*:*:expressway:*:*:* Versions x8.11.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x8.11.4:*:*:*:expressway:*:*:* Versions x8.11.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.0:*:*:*:expressway:*:*:* Versions x12.5.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.1:*:*:*:expressway:*:*:* Versions x12.5.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.2:*:*:*:expressway:*:*:* Versions x12.5.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.3:*:*:*:expressway:*:*:* Versions x12.5.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.4:*:*:*:expressway:*:*:* Versions x12.5.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.5:*:*:*:expressway:*:*:* Versions x12.5.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.6:*:*:*:expressway:*:*:* Versions x12.5.6 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.7:*:*:*:expressway:*:*:* Versions x12.5.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.8:*:*:*:expressway:*:*:* Versions x12.5.8 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.5.9:*:*:*:expressway:*:*:* Versions x12.5.9 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.0:*:*:*:expressway:*:*:* Versions x12.6.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.1:*:*:*:expressway:*:*:* Versions x12.6.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.2:*:*:*:expressway:*:*:* Versions x12.6.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.3:*:*:*:expressway:*:*:* Versions x12.6.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.6.4:*:*:*:expressway:*:*:* Versions x12.6.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.7.0:*:*:*:expressway:*:*:* Versions x12.7.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x12.7.1:*:*:*:expressway:*:*:* Versions x12.7.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.0:*:*:*:expressway:*:*:* Versions x14.0.0 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.1:*:*:*:expressway:*:*:* Versions x14.0.1 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.2:*:*:*:expressway:*:*:* Versions x14.0.2 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.3:*:*:*:expressway:*:*:* Versions x14.0.3 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.4:*:*:*:expressway:*:*:* Versions x14.0.4 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.5:*:*:*:expressway:*:*:* Versions x14.0.5 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.6:*:*:*:expressway:*:*:* Versions x14.0.6 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.7:*:*:*:expressway:*:*:* Versions x14.0.7 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.8:*:*:*:expressway:*:*:* Versions x14.0.8 Vulnerable ·Cisco
- cpe:2.3:a:cisco:telepresence_video_communication_server:x14.0.9:*:*:*:expressway:*:*:* Versions x14.0.9 Vulnerable ·Cisco
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-20814
- 2026-10-03 Alias added: GHSA-rg5m-fc62-h68h
References
Advisory 1
Other 3
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-bng-Gmg5Gxt</a></p><p>This advisory is part of the September 2022 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see <a href="https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-74840">Cisco Event Response: September 2022 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ncs4k-tl1-GNnLwC6</a></p><p>This advisory is part of the September 2022 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see <a href="https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-74840">Cisco Event Response: September 2022 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-cdp-wnALzvT2</a></p><p>This advisory is part of the September 2022 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see <a href="https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-74840">Cisco Event Response: September 2022 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication
More Cisco Telepresence Video Communication Server vulnerabilities
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2023-06915 Code injection in Cisco TelePresence Video Communication Server Expressway CVSS 3.1HIGH 7.2
- TI-2019-01468 Improper input validation in Cisco TelePresence Video Communication Server CVSS 3.0HIGH 8.6
- TI-2022-05314 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities CVSS 3.1CRITICAL 9.0
- TI-2022-05313 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities CVSS 3.1CRITICAL 9.0
- TI-2022-05371 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities CVSS 3.1CRITICAL 9.0
Sources
- CVE-2022-20814 · CVE Program
- CVE-2022-20814 · NVD
- FIRST EPSS
- GHSA-rg5m-fc62-h68h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences