[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-AFg4S0EbNDrB2OAevH6LbRML4a62U9OIA-zwLbIqxg":3,"g5a-risk:CVE-2022-20813":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":26,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":61,"references":62,"referencesCount":68,"weaknesses":69,"weaknessesCount":61,"isActivelyExploited":85,"cisaInfo":26,"otxData":26,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":123,"notableEvents":124},"CVE-2022-20813","What is CVE-2022-20813?","Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks on an affected device. Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device. For more information about these vulnerabilities, see the Details section of this advisory.","Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (V...","2022-07-06T21:15:11.693","2023-11-07T03:43:01.517",5.9,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":40,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,2.2,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":38,"ImpactScore":39},"d1c1063e-7a18-46af-9102-31f8928bc633","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":34,"PrivilegesRequired":22,"UserInteraction":23,"Scope":35,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":34,"BaseScore":36,"BaseSeverity":37,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":34,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:L","LOW","CHANGED",9,"CRITICAL",2.3,6,[41],{"Source":17,"Type":18,"CVSSData":42,"BaseSeverity":25,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":43,"VectorString":44,"AccessVector":21,"AccessComplexity":25,"Authentication":23,"ConfidentialityImpact":45,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":46,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.01108,[49,49,49,49,49,49,49],"Medium",[53,58],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"cisco","expressway","*","cpe:2.3:a:cisco:expressway:*:*:*:*:*:*:*:*",{"vendor":54,"product":59,"version":56,"criteria":60,"vulnerable":4},"telepresence_video_communication_server","cpe:2.3:a:cisco:telepresence_video_communication_server:*:*:*:*:*:*:*:*",2,[63],{"url":64,"source":65,"tags":66},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-expressway-overwrite-3buqW8LH","Cisco",[67],"Vendor Advisory",1,[70,78],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-295","Improper Certificate Validation","The product does not validate, or incorrectly validates, a certificate.","When a certificate is invalid or malicious, it might allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. The product might connect to a malicious host while believing it is a trusted host, or the product might be deceived into accepting spoofed data that appears to originate from a trusted host.","Draft","Base","Simple",{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":77},"CWE-158","Improper Neutralization of Null Byte or NUL Character","The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes NUL characters or null bytes when they are sent to a downstream component.","As data is parsed, an injected NUL character or null byte may cause the product to believe the input is terminated earlier than it actually is, or otherwise cause the input to be misinterpreted. This could then be used to inject potentially dangerous input that occurs after the null byte or otherwise bypass validation routines and other protection mechanisms.","Incomplete","Variant",false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2022-20813? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-20813, a medium severity cyber security vulnerability from 2022. Multiple vulnerabilities in the API and in the web-based ...","CVE-2022-20813, CVE-2022-20813 vulnerability, CVE-2022-20813 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, cisco security, expressway vulnerability, telepresence_video_communication_server vulnerability","\u002Fwhat-is\u002Fcve-2022-20813",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-20813","Cybersecurity","CVE-2022-20813, CVE-2022-20813 vulnerability, CVE-2022-20813 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":26,"Negate":26,"Nodes":114},[115],{"Operator":116,"Negate":26,"CPEMatch":117},"OR",[118,121],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":119,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":120,"VersionEndIncluding":26},"4E7864EF-C205-43AF-9DFA-8C7F5BC110C0","x14.0.7",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":120,"VersionEndIncluding":26},"0B2389A0-EC1B-4763-AC68-AFFE45A48455",[],[],{"lastModified":11,"cacheTime":126,"version":43},1792353295033,{"score":128,"band":51,"action":129,"scoredAt":130},54,"Plan remediation","2026-10-16T06:55:02.219579+00:00"]