Rewterz Threat Advisory – CVE-2022-20808 – Cisco Smart Software Manager On-Prem Vulnerability

Rewterz Threat Alert – Donot APT Group – Active IOCs

July 7, 2022

Rewterz Threat Advisory – CVE-2022-20812 – Cisco Expressway Series and TelePresence Video Communication Server Vulnerability

Severity

High

Analysis Summary

CVE-2022-20812

Cisco Expressway Series and TelePresence Video Communication Server could allow a remote authenticated attacker to traverse directories on the system, caused by insufficient input validation of user-supplied command arguments. By authenticating to the system as an administrative read-write user and submitting crafted input to the affected command, an attacker could overwrite arbitrary files on the underlying operating system as the root user.

Impact

Information Theft

Indicators Of Compromise

CVE

CVE-2022-20812

Affected Vendors

Cisco

Affected Products

Cisco Expressway Series 14
Cisco Expressway Series 14.0.6
Cisco TelePresence Video Communication Server 14
Cisco TelePresence Video Communication Server 14.0.6

Remediation

Refer to Cisco Security Advisory for patch, upgrade or suggested workaround information.

Cisco Security Advisory

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo