CVE-2022-20814Cisco Expressway Series and Cisco TelePresence VCS Improper Certificate Validation Vulnerability
- 7.4HighCVSS base score
- 0.91%Exploitation in 30 daysEPSS · top 39% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
A vulnerability in the certificate validation of Cisco Expressway-C and Cisco TelePresence VCS could allow an unauthenticated, remote attacker to gain unauthorized access to sensitive data. The vulnerability is due to a lack of validation of the SSL server certificate that an affected device receives when it establishes a connection to a Cisco Unified Communications Manager device. An attacker could exploit this vulnerability by using a man-in-the-middle technique to intercept the traffic between the devices, and then using a self-signed certificate to impersonate the endpoint. A successful exploit could allow the attacker to view the intercepted traffic in clear text or alter the contents of the traffic. Note: Cisco Expressway-E is not affected by this vulnerability.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Timeline
ID reserved
By cisco
- 3 years later
· 3 years later
Published
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| ciscoCNA (assigner) | 3.1 | High7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
| NVDNVD · Analyzed | 3.1 | High7.4 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
- EPSS (exploitation in 30 days)
- 0.91% · top 39% of all CVEs (15 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.4.
Affected products
Cisco · Cisco TelePresence Video Communication Server (VCS) Expressway
- affected X8.11.2
- affected X8.6
- affected X8.11.3
- affected X8.2.2
- affected X8.8.3
- affected X8.11.0
- affected X12.5.2
- affected X8.1.1
- affected X8.9
- affected X12.5.1
- affected X12.5.6
- affected X8.7.3
- affected X12.6.0
- affected X8.11.1
- affected X8.5
- affected X8.9.1
- affected X8.10.2
- affected X8.8.2
- affected X8.5.3
- affected X8.1
- affected X8.9.2
- affected X8.11.4
- affected X12.5.4
- affected X8.8.1
- affected X8.2.1
- affected X8.5.1
- affected X8.6.1
- affected X8.1.2
- affected X8.8
- affected X8.10.0
- affected X12.5.3
- affected X8.10.1
- affected X12.5.7
- affected X8.10.3
- affected X8.7.1
- affected X8.2
- affected X12.5.8
- affected X8.7
- affected X8.5.2
- affected X12.5.9
- and 20 more
What to do
Exploitation: The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
References
References4
- cisco-sa-expressway-csrf-sqpsSfY6 (opens in a new tab)
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-bng-Gmg5Gxt (opens in a new tab)
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ncs4k-tl1-GNnLwC6 (opens in a new tab)
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-cdp-wnALzvT2 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2022-26064 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2022-20814)Record last updated .