CVE-2022-20812

🗓️ 06 Jul 2022 20:30:40Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 1096 Views

Multiple vulnerabilities in Cisco Expressway Series and TelePresence Video Communication Server (VCS) could allow remote attackers to overwrite files or conduct null byte poisoning attacks

Reporter	Title	Published	Views	Family All 16
ATTACKERKB	CVE-2022-20812	6 Jul 202216:00	–	attackerkb
Circl	CVE-2022-20812	7 Jul 202200:14	–	circl
Cisco	Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities	5 Oct 202216:00	–	cisco
Cisco	Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities	6 Jul 202216:00	–	cisco
Tenable Nessus	Cisco TelePresence VCS Multiple Vulnerabilities (cisco-sa-expressway-overwrite-3buqW8LH)	8 Jul 202200:00	–	nessus
CNNVD	Cisco Expressway Series 和 Cisco TelePresence Video Communication Server 路径遍历漏洞	6 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-20812 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities	6 Jul 202220:30	–	cvelist
EUVD	EUVD-2022-26062	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco products	7 Jul 202200:00	–	ncsc
NVD	CVE-2022-20812	6 Jul 202221:15	–	nvd

NVD

Node

cisco expresswayRange<x14.0.7

cisco telepresence_video_communication_serverRange<x14.0.7

[
  {
    "vendor": "Cisco",
    "product": "Cisco TelePresence Video Communication Server (VCS) Expressway",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LH
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6