CVE-2022-20830

Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability

Severity Score

5.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Attend

*SSVC

Descriptions

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC without authentication. This vulnerability exists because the GUI is accessible on self-managed cloud installations or local server installations of Cisco vManage. An attacker could exploit this vulnerability by accessing the exposed GUI of Cisco SD-AVC. A successful exploit could allow the attacker to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses.

Una vulnerabilidad en el mecanismo de autenticación de Cisco Software-Defined Application Visibility and Control (SD-AVC) en Cisco vManage podría permitir a un atacante remoto no autenticado acceder a la GUI de Cisco SD-AVC sin autenticación. Esta vulnerabilidad se presenta porque la GUI es accesible en instalaciones autoadministradas en la nube o en instalaciones de servidores locales de Cisco vManage. Un atacante podría explotar esta vulnerabilidad al acceder a la GUI expuesta de Cisco SD-AVC. Una explotación con éxito podría permitir al atacante visualizar los nombres de los dispositivos administrados, los registros de SD-AVC y las direcciones IP del servidor DNS de SD-AVC

*Credits: N/A

CVSS Scores

NISTv3.1 5.3

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

None

Automatable

Yes

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2021-11-02 CVE Reserved
2022-10-10 CVE Published
2024-04-20 EPSS Updated
2024-11-01 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-306: Missing Authentication for Critical Function

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-avc-NddSGB8	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Catalyst Sd-wan Manager Search vendor "Cisco" for product "Catalyst Sd-wan Manager"				>= 20.4 < 20.6.1 Search vendor "Cisco" for product "Catalyst Sd-wan Manager" and version " >= 20.4 < 20.6.1"		-		Affected
Cisco Search vendor "Cisco"		Catalyst Sd-wan Manager Search vendor "Cisco" for product "Catalyst Sd-wan Manager"				20.7 Search vendor "Cisco" for product "Catalyst Sd-wan Manager" and version "20.7"		-		Affected
Cisco Search vendor "Cisco"		Sd-wan Vmanage Search vendor "Cisco" for product "Sd-wan Vmanage"				>= 18.4 < 20.3.4.1 Search vendor "Cisco" for product "Sd-wan Vmanage" and version " >= 18.4 < 20.3.4.1"		-		Affected