[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCsJ2s_3u7uAv5C_60OP347nBeKLQR_9kMr069TZt2ms":3,"g5a-risk:CVE-2022-20844":121},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":54,"references":55,"referencesCount":61,"weaknesses":62,"weaknessesCount":61,"isActivelyExploited":71,"cisaInfo":26,"otxData":26,"relatedBlogPosts":72,"seoMetadata":73,"configurations":98,"relatedVendorCves":116,"notableEvents":117},"CVE-2022-20844","What is CVE-2022-20844?","A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC using a default static username and password combination. This vulnerability exists because the GUI is accessible on self-managed cloud installations or local server installations of Cisco vManage. An attacker could exploit this vulnerability by accessing the exposed GUI of Cisco SD-AVC. A successful exploit could allow the attacker to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses.","A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthentic...","2022-09-30T19:15:11.987","2023-11-07T03:43:06.533",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"d1c1063e-7a18-46af-9102-31f8928bc633","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00916,[33,33,33,33,33,33,33],"Medium",[37,42,45,48,51],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"cisco","sd-wan","*","cpe:2.3:a:cisco:sd-wan:*:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"20.3.4.1","cpe:2.3:a:cisco:sd-wan:20.3.4.1:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"20.3.4.2","cpe:2.3:a:cisco:sd-wan:20.3.4.2:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"20.3.5","cpe:2.3:a:cisco:sd-wan:20.3.5:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":52,"criteria":53,"vulnerable":4},"20.7.1","cpe:2.3:a:cisco:sd-wan:20.7.1:*:*:*:*:*:*:*",5,[56],{"url":57,"source":58,"tags":59},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-sdavc-ZA5fpXX2","Cisco",[60],"Vendor Advisory",1,[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",false,[],{"title":74,"metaDescription":75,"keywords":76,"canonicalUrl":77,"structuredData":78},"What is CVE-2022-20844? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-20844, a medium severity cyber security vulnerability from 2022. A vulnerability in authentication mechanism of Cisco Soft...","CVE-2022-20844, CVE-2022-20844 vulnerability, CVE-2022-20844 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, cisco security, sd-wan vulnerability","\u002Fwhat-is\u002Fcve-2022-20844",{"@context":79,"@type":80,"headline":74,"description":75,"datePublished":10,"dateModified":11,"author":81,"publisher":85,"about":89,"mainEntityOfPage":93,"articleSection":96,"keywords":97},"https:\u002F\u002Fschema.org","TechArticle",{"@type":82,"name":83,"url":84},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":82,"name":83,"url":84,"logo":86},{"@type":87,"url":88},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":90,"name":6,"description":91,"additionalType":92},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":94,"@id":95},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-20844","Cybersecurity","CVE-2022-20844, CVE-2022-20844 vulnerability, CVE-2022-20844 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[99],{"Operator":26,"Negate":26,"Nodes":100},[101],{"Operator":102,"Negate":26,"CPEMatch":103},"OR",[104,108,110,112,114],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":105,"VersionStartExcluding":26,"VersionStartIncluding":106,"VersionEndExcluding":107,"VersionEndIncluding":26},"B924F9AC-46FE-4587-AA9D-1CB6102F2DE2","20.4.1","20.6.3",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0C2FBD6B-5E9B-49B6-9832-49721EC2A809",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":111,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"55592EA0-64B8-4B4E-9908-A1282DE1279E",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"12F6186F-0690-45B1-A22B-8331E2A4BF38",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"65439145-5E94-4FF7-BEB3-C80BA4E4602F",[],[],{"lastModified":11,"cacheTime":119,"version":120},1792367999794,"2.0",{"score":122,"band":123,"action":124,"scoredAt":125},23,"Low","Monitor","2026-10-16T06:55:51.813752+00:00"]