The vulnerability of the Cisco Software-Defined Application Visibility and Control (SD-AVC) function in the centralized network management system, the Cisco Catalyst SD-WAN Manager, allows a intruder to gain unauthorized access to the system.

🗓️ 24 Dec 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Lack of authentication in Cisco SD-AVC on Catalyst WAN Manager enables remote unauthorized access.

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-20830	28 Sep 202216:00	–	attackerkb
Circl	CVE-2022-20830	11 Oct 202200:25	–	circl
Cisco	Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability	28 Sep 202216:00	–	cisco
Tenable Nessus	Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass (cisco-sa-sdwan-avc-NddSGB8)	29 Sep 202200:00	–	nessus
CNNVD	Cisco vManage 访问控制错误漏洞	28 Sep 202200:00	–	cnnvd
CVE	CVE-2022-20830	10 Oct 202220:43	–	cve
Cvelist	CVE-2022-20830 Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability	10 Oct 202220:43	–	cvelist
EUVD	EUVD-2022-26080	3 Oct 202520:07	–	euvd
NVD	CVE-2022-20830	10 Oct 202221:15	–	nvd
OSV	CVE-2022-20830	10 Oct 202221:15	–	osv

Vulners

Node

cisco_systems catalyst_sd-wan_managerRange18.4–20.3.4.1

OR

cisco_systems catalyst_sd-wan_managerRange20.4–20.6.1.

OR

cisco_systems catalyst_sd-wan_managerMatch20.7

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-20830
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-avc-NddSGB8
web	www.web.nvd.nist.gov/view/vuln/detail

03 Oct 2023 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 25

CVSS 35.3

EPSS0.00669

Cisco software defined application visibility control centralized management remote unauthorized access authentication missing Catalyst WAN Manager