The vulnerability of Cisco Expressway microprogramming software and Cisco TelePresence Video Communication Server microprogramming software for control devices is related to errors in the authentication process. This vulnerability allows attackers to execute a type of “man-in-the-middle” attack.

Authentication flaws in Cisco Expressway and TelePresence Server enable man-in-the-middle attacks on control and call devices.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-20814	7 Oct 202210:05	–	circl
Tenable Nessus	Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability (cisco-sa-expressway-csrf-sqpsSfY6)	7 Oct 202200:00	–	nessus
Cisco	Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities	5 Oct 202216:00	–	cisco
CNNVD	Cisco Expressway Series和Cisco TelePresence Video Communication Server 信任管理问题漏洞	5 Oct 202200:00	–	cnnvd
CVE	CVE-2022-20814	15 Nov 202415:32	–	cve
Cvelist	CVE-2022-20814 Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability	15 Nov 202415:32	–	cvelist
EUVD	EUVD-2022-26064	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco TelePresence	6 Oct 202200:00	–	ncsc
NVD	CVE-2022-20814	15 Nov 202416:15	–	nvd
Positive Technologies	PT-2022-5102 · Cisco · Cisco Telepresence Vcs +1	5 Oct 202200:00	–	ptsecurity