April 18, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – CVE-2022-20810 – Cisco IOS XE Wireless Controller Software Vulnerability
October 1, 2022Rewterz Threat Advisory – CVE-2022-20856 – Cisco IOS XE Wireless Controller Software for the Catalyst Vulnerability
October 2, 2022Rewterz Threat Advisory – CVE-2022-20810 – Cisco IOS XE Wireless Controller Software Vulnerability
October 1, 2022Rewterz Threat Advisory – CVE-2022-20856 – Cisco IOS XE Wireless Controller Software for the Catalyst Vulnerability
October 2, 2022
Severity
Medium
Analysis Summary
CVE-2022-20844
Cisco Software-Defined Application Visibility and Control on Cisco vManage could allow a remote attacker to obtain sensitive information, caused by a flaw in authentication mechanism. By accessing the exposed GUI of Cisco SD-AVC, a remote attacker could exploit this vulnerability to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses.
Impact
- Information Disclosure
Indicators Of Compromise
CVE
- CVE-2022-20844
Affected Vendors
Cisco
Affected Products
Cisco Software-Defined Application Visibility and Control
Cisco vManage
Remediation
Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.
