CVE-2022-20868
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker to elevate privileges on an affected system. The attacker needs valid credentials to exploit this vulnerability.
This vulnerability is due to the use of a hardcoded value to encrypt a token used for certain APIs calls . An attacker could exploit this vulnerability by authenticating to the device and sending a crafted HTTP request. A successful exploit could allow the attacker to impersonate another valid user and execute commands with the privileges of that user account.
Una vulnerabilidad en la interfaz de administración basada en web de Cisco Email Security Appliance, Cisco Secure Email and Web Manager y Cisco Secure Web Appliance podría permitir que un atacante remoto autenticado eleve los privilegios en un sistema afectado. El atacante necesita credenciales válidas para aprovechar esta vulnerabilidad. Esta vulnerabilidad se debe al uso de un valor codificado a mano para cifrar un token utilizado para ciertas llamadas API. Un atacante podría aprovechar esta vulnerabilidad autenticándose en el dispositivo y enviando una solicitud HTTP manipulada. Un exploit exitoso podría permitir al atacante hacerse pasar por otro usuario válido y ejecutar comandos con los privilegios de esa cuenta de usuario.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-11-02 CVE Reserved
- 2022-11-03 CVE Published
- 2024-06-10 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-321: Use of Hard-coded Cryptographic Key
- CWE-798: Use of Hard-coded Credentials
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esasmawsa-vulns-YRuSW5mD |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Asyncos Search vendor "Cisco" for product "Asyncos" | >= 13.0 < 14.2.1 Search vendor "Cisco" for product "Asyncos" and version " >= 13.0 < 14.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Email Gateway Search vendor "Cisco" for product "Secure Email Gateway" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Asyncos Search vendor "Cisco" for product "Asyncos" | >= 12.0 < 14.2.0 Search vendor "Cisco" for product "Asyncos" and version " >= 12.0 < 14.2.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Email And Web Manager Search vendor "Cisco" for product "Secure Email And Web Manager" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Asyncos Search vendor "Cisco" for product "Asyncos" | >= 11.8 < 12.5.5 Search vendor "Cisco" for product "Asyncos" and version " >= 11.8 < 12.5.5" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Web Appliance Search vendor "Cisco" for product "Secure Web Appliance" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Asyncos Search vendor "Cisco" for product "Asyncos" | >= 14.0 < 14.0.4 Search vendor "Cisco" for product "Asyncos" and version " >= 14.0 < 14.0.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Web Appliance Search vendor "Cisco" for product "Secure Web Appliance" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Asyncos Search vendor "Cisco" for product "Asyncos" | 14.5 Search vendor "Cisco" for product "Asyncos" and version "14.5" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Web Appliance Search vendor "Cisco" for product "Secure Web Appliance" | - | - |
Safe
|