[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqa-aZ3KaKUctuvfAul09VDylXDb-Il0wloR1FEwIvYg":3,"g5a-risk:CVE-2022-20817":276},{"success":4,"data":5,"meta":274},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":25,"epssTimeSeries":42,"severity":44,"affectedProducts":45,"affectedProductsCount":115,"references":116,"referencesCount":122,"weaknesses":123,"weaknessesCount":122,"isActivelyExploited":132,"cisaInfo":25,"otxData":25,"relatedBlogPosts":133,"seoMetadata":134,"configurations":159,"relatedVendorCves":272,"notableEvents":273},"CVE-2022-20817","What is CVE-2022-20817?","A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communications Manager (CUCM) is in secure mode. This vulnerability is due to improper key generation during the manufacturing process that could result in duplicated manufactured keys installed on multiple devices. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on the secure communication between the phone and the CUCM. A successful exploit could allow the attacker to impersonate another user's phone. This vulnerability cannot be addressed with software updates. There is a workaround that addresses this vulnerability.","A vulnerability in Cisco Unified IP Phones could allow an unauthenticated, remote attacker to impersonate another user's phone if the Cisco Unified Communica...","2022-06-15T18:15:08.997","2023-11-07T03:43:02.067",7.4,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":32,"CVSSMetricV40":25},[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.2,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"d1c1063e-7a18-46af-9102-31f8928bc633","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":23,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},[33],{"Source":17,"Type":18,"CVSSData":34,"BaseSeverity":39,"ExploitabilityScore":40,"ImpactScore":40,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":35,"VectorString":36,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":37,"IntegrityImpact":37,"AvailabilityImpact":23,"BaseScore":38,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:H\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",4,"MEDIUM",4.9,0.01211,[43,43,43,41,41,41,41],0.01182,"High",[46,51,54,57,60,63,66,69,72,75,78,81,84,87,90,93,96,99,102,105,108,112],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"cisco","unified_ip_phone_6911","-","cpe:2.3:h:cisco:unified_ip_phone_6911:-:*:*:*:*:*:*:*",{"vendor":47,"product":52,"version":49,"criteria":53,"vulnerable":4},"unified_ip_phone_6911_firmware","cpe:2.3:o:cisco:unified_ip_phone_6911_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":55,"version":49,"criteria":56,"vulnerable":4},"unified_ip_phone_6921","cpe:2.3:h:cisco:unified_ip_phone_6921:-:*:*:*:*:*:*:*",{"vendor":47,"product":58,"version":49,"criteria":59,"vulnerable":4},"unified_ip_phone_6921_firmware","cpe:2.3:o:cisco:unified_ip_phone_6921_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":61,"version":49,"criteria":62,"vulnerable":4},"unified_ip_phone_6941","cpe:2.3:h:cisco:unified_ip_phone_6941:-:*:*:*:*:*:*:*",{"vendor":47,"product":64,"version":49,"criteria":65,"vulnerable":4},"unified_ip_phone_6941_firmware","cpe:2.3:o:cisco:unified_ip_phone_6941_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":67,"version":49,"criteria":68,"vulnerable":4},"unified_ip_phone_6945","cpe:2.3:h:cisco:unified_ip_phone_6945:-:*:*:*:*:*:*:*",{"vendor":47,"product":70,"version":49,"criteria":71,"vulnerable":4},"unified_ip_phone_6945_firmware","cpe:2.3:o:cisco:unified_ip_phone_6945_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":73,"version":49,"criteria":74,"vulnerable":4},"unified_ip_phone_6961","cpe:2.3:h:cisco:unified_ip_phone_6961:-:*:*:*:*:*:*:*",{"vendor":47,"product":76,"version":49,"criteria":77,"vulnerable":4},"unified_ip_phone_6961_firmware","cpe:2.3:o:cisco:unified_ip_phone_6961_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":79,"version":49,"criteria":80,"vulnerable":4},"unified_ip_phone_8941","cpe:2.3:h:cisco:unified_ip_phone_8941:-:*:*:*:*:*:*:*",{"vendor":47,"product":82,"version":49,"criteria":83,"vulnerable":4},"unified_ip_phone_8941_firmware","cpe:2.3:o:cisco:unified_ip_phone_8941_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":85,"version":49,"criteria":86,"vulnerable":4},"unified_ip_phone_8945","cpe:2.3:h:cisco:unified_ip_phone_8945:-:*:*:*:*:*:*:*",{"vendor":47,"product":88,"version":49,"criteria":89,"vulnerable":4},"unified_ip_phone_8945_firmware","cpe:2.3:o:cisco:unified_ip_phone_8945_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":91,"version":49,"criteria":92,"vulnerable":4},"unified_ip_phone_8961","cpe:2.3:h:cisco:unified_ip_phone_8961:-:*:*:*:*:*:*:*",{"vendor":47,"product":94,"version":49,"criteria":95,"vulnerable":4},"unified_ip_phone_8961_firmware","cpe:2.3:o:cisco:unified_ip_phone_8961_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":97,"version":49,"criteria":98,"vulnerable":4},"unified_ip_phone_9951_firmware","cpe:2.3:o:cisco:unified_ip_phone_9951_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":100,"version":49,"criteria":101,"vulnerable":4},"unified_ip_phone_9951","cpe:2.3:h:cisco:unified_ip_phone_9951:-:*:*:*:*:*:*:*",{"vendor":47,"product":103,"version":49,"criteria":104,"vulnerable":4},"unified_ip_phone_9971_firmware","cpe:2.3:o:cisco:unified_ip_phone_9971_firmware:-:*:*:*:*:*:*:*",{"vendor":47,"product":106,"version":49,"criteria":107,"vulnerable":4},"unified_ip_phone_9971","cpe:2.3:h:cisco:unified_ip_phone_9971:-:*:*:*:*:*:*:*",{"vendor":47,"product":109,"version":110,"criteria":111,"vulnerable":4},"ata_187_analog_telephone_adapter_firmware","*","cpe:2.3:o:cisco:ata_187_analog_telephone_adapter_firmware:*:*:*:*:*:*:*:*",{"vendor":47,"product":113,"version":49,"criteria":114,"vulnerable":4},"ata_187_analog_telephone_adapter","cpe:2.3:h:cisco:ata_187_analog_telephone_adapter:-:*:*:*:*:*:*:*",22,[117],{"url":118,"source":119,"tags":120},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-cp6901-dup-cert-82jdJGe4","Cisco",[121],"Vendor Advisory",1,[124],{"id":125,"name":126,"description":127,"extendedDescription":128,"status":129,"abstraction":130,"structure":131},"CWE-338","Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)","The product uses a Pseudo-Random Number Generator (PRNG) in a security context, but the PRNG's algorithm is not cryptographically strong.","When a non-cryptographic PRNG is used in a cryptographic context, it can expose the cryptography to certain types of attacks.\nOften a pseudo-random number generator (PRNG) is not designed for cryptography. Sometimes a mediocre source of randomness is sufficient or preferable for algorithms that use random numbers. Weak generators generally take less processing power and\u002For do not use the precious, finite, entropy sources on a system. While such PRNGs might have very useful features, these same features could be used to break the cryptography.","Draft","Base","Simple",false,[],{"title":135,"metaDescription":136,"keywords":137,"canonicalUrl":138,"structuredData":139},"What is CVE-2022-20817? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-20817, a high severity cyber security vulnerability from 2022. A vulnerability in Cisco Unified IP Phones could allow an u...","CVE-2022-20817, CVE-2022-20817 vulnerability, CVE-2022-20817 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, cisco security, unified_ip_phone_6911 vulnerability, unified_ip_phone_6911_firmware vulnerability, unified_ip_phone_6921 vulnerability, unified_ip_phone_6921_firmware vulnerability, unified_ip_phone_6941 vulnerability","\u002Fwhat-is\u002Fcve-2022-20817",{"@context":140,"@type":141,"headline":135,"description":136,"datePublished":10,"dateModified":11,"author":142,"publisher":146,"about":150,"mainEntityOfPage":154,"articleSection":157,"keywords":158},"https:\u002F\u002Fschema.org","TechArticle",{"@type":143,"name":144,"url":145},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":143,"name":144,"url":145,"logo":147},{"@type":148,"url":149},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":151,"name":6,"description":152,"additionalType":153},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":155,"@id":156},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-20817","Cybersecurity","CVE-2022-20817, CVE-2022-20817 vulnerability, CVE-2022-20817 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[160,172,182,192,202,212,222,232,242,252,262],{"Operator":161,"Negate":25,"Nodes":162},"AND",[163,168],{"Operator":164,"Negate":25,"CPEMatch":165},"OR",[166],{"Vulnerable":25,"Criteria":50,"MatchCriteriaID":167,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F32CF4BC-40AD-4C9C-8787-2B7EAE2B3B5F",{"Operator":164,"Negate":25,"CPEMatch":169},[170],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":171,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"33DC1B73-7716-4C33-B708-DB70C91D4EFF",{"Operator":161,"Negate":25,"Nodes":173},[174,178],{"Operator":164,"Negate":25,"CPEMatch":175},[176],{"Vulnerable":25,"Criteria":56,"MatchCriteriaID":177,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"9B807519-7A91-4137-8B0D-0820C6299C13",{"Operator":164,"Negate":25,"CPEMatch":179},[180],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":181,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"CF807E93-45B9-4197-A475-81FD8BB84360",{"Operator":161,"Negate":25,"Nodes":183},[184,188],{"Operator":164,"Negate":25,"CPEMatch":185},[186],{"Vulnerable":25,"Criteria":62,"MatchCriteriaID":187,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FAD4832E-16D3-4E26-B8ED-D32F5CB83180",{"Operator":164,"Negate":25,"CPEMatch":189},[190],{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":191,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"538BDFFF-1F29-4612-9415-9ABE0DF61B3B",{"Operator":161,"Negate":25,"Nodes":193},[194,198],{"Operator":164,"Negate":25,"CPEMatch":195},[196],{"Vulnerable":25,"Criteria":68,"MatchCriteriaID":197,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"4B3B667E-9019-4A33-9BB0-D15560EC4145",{"Operator":164,"Negate":25,"CPEMatch":199},[200],{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":201,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"73C85716-FF1C-4DDF-BA4B-8F082C0F41EB",{"Operator":161,"Negate":25,"Nodes":203},[204,208],{"Operator":164,"Negate":25,"CPEMatch":205},[206],{"Vulnerable":25,"Criteria":74,"MatchCriteriaID":207,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"BEDF755A-DFA2-4BCB-9A06-0A225B8F05B7",{"Operator":164,"Negate":25,"CPEMatch":209},[210],{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":211,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"BE612EC5-04F4-48C7-9491-513DE4752304",{"Operator":161,"Negate":25,"Nodes":213},[214,218],{"Operator":164,"Negate":25,"CPEMatch":215},[216],{"Vulnerable":25,"Criteria":80,"MatchCriteriaID":217,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FE80CCF2-84B6-409D-BED3-D1C3D8807D5F",{"Operator":164,"Negate":25,"CPEMatch":219},[220],{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":221,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"A2CADFBC-152A-4360-8A3B-74AC7D7C6AE4",{"Operator":161,"Negate":25,"Nodes":223},[224,228],{"Operator":164,"Negate":25,"CPEMatch":225},[226],{"Vulnerable":25,"Criteria":86,"MatchCriteriaID":227,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"645668C0-1702-4EBE-AF4D-F73824AF4C41",{"Operator":164,"Negate":25,"CPEMatch":229},[230],{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":231,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"F2811EB8-047B-4B6B-AEE2-90B175829D18",{"Operator":161,"Negate":25,"Nodes":233},[234,238],{"Operator":164,"Negate":25,"CPEMatch":235},[236],{"Vulnerable":25,"Criteria":92,"MatchCriteriaID":237,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"73338C3B-3AFA-4F64-B8C6-FDEBBBDCFD31",{"Operator":164,"Negate":25,"CPEMatch":239},[240],{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":241,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"AE399426-F090-4E49-9B8D-F5626ED8DD0A",{"Operator":161,"Negate":25,"Nodes":243},[244,248],{"Operator":164,"Negate":25,"CPEMatch":245},[246],{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":247,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"63DB2B9A-C131-4FA1-BFE3-E2879A8C945D",{"Operator":164,"Negate":25,"CPEMatch":249},[250],{"Vulnerable":25,"Criteria":101,"MatchCriteriaID":251,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"C0B483E7-0B8D-480B-94B9-93F00AE91B4B",{"Operator":161,"Negate":25,"Nodes":253},[254,258],{"Operator":164,"Negate":25,"CPEMatch":255},[256],{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":257,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"667CCF0A-0D40-4000-9DD5-FE506F0BC725",{"Operator":164,"Negate":25,"CPEMatch":259},[260],{"Vulnerable":25,"Criteria":107,"MatchCriteriaID":261,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"FBF7ABE8-03D3-4ACA-834A-89D37D5EBFB2",{"Operator":161,"Negate":25,"Nodes":263},[264,268],{"Operator":164,"Negate":25,"CPEMatch":265},[266],{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":267,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"ED8E935A-C400-45D0-85C1-7C75769E2AA5",{"Operator":164,"Negate":25,"CPEMatch":269},[270],{"Vulnerable":25,"Criteria":114,"MatchCriteriaID":271,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"AA0CD943-831E-49B6-8BA9-EA21972ACEBA",[],[],{"lastModified":11,"cacheTime":275,"version":35},1792382356502,{"score":277,"band":278,"action":279,"scoredAt":280},46,"Medium","Plan remediation","2026-10-16T06:54:49.288817+00:00"]