CVE-2022-20813: cisco cisco telepresence video communication server (vcs) expressway
Vulnerability summary
CVE-2022-20813 is a critical (CVSS 9.0) vulnerability in cisco cisco telepresence video communication server (vcs) expressway. EPSS estimates a 1.11% chance of exploitation in the next 30 days, higher than 65.3% of scored vulnerabilities.
Timeline
- 06-07-2022PublishedVulnerability first disclosed.
- 06-11-2024Last modifiedVulnerability information updated.
Description
Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks on an affected device. Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST5.9MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NDiffers
EPSS trend
Probability
1.11%
Chance of exploitation in the next 30 days
Percentile
65%
Versus all other CVEs
30-day change
+0.03 pp
From 1.08% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-158Improper Neutralization of Null Byte or NUL CharacterThe product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.
- CWE-295Improper Certificate ValidationThe product does not validate, or incorrectly validates, a certificate.
Affected systems
Cisco3 products
1 vendor · 3 products
References
1 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LHVendor AdvisoryX Refsource CISCO