CVE-2022-20814

Q: What is the severity of CVE-2022-20814?

CVE-2022-20814 has a CVSS score of 7.4 (HIGH). This vulnerability allows an unauthenticated remote attacker to perform man-in-the-middle attacks against Cisco Expressway-C and TelePresence VCS devices. By intercepting traffic and using a self-signed certificate, attackers can view or modify sensitive communications in clear text. Only Expressway-C and TelePresence VCS connecting to Cisco Unified Communications Manager are affected.

7.4 HIGH

Authentication Bypass

📋 TL;DR

This vulnerability allows an unauthenticated remote attacker to perform man-in-the-middle attacks against Cisco Expressway-C and TelePresence VCS devices. By intercepting traffic and using a self-signed certificate, attackers can view or modify sensitive communications in clear text. Only Expressway-C and TelePresence VCS connecting to Cisco Unified Communications Manager are affected.

💻 Affected Systems

Products:

Cisco Expressway-C
Cisco TelePresence VCS

Versions: Specific versions not provided in description, refer to Cisco advisory

Operating Systems: Cisco proprietary OS

Default Config Vulnerable: ⚠️ Yes

Notes: Only affects connections to Cisco Unified Communications Manager. Expressway-E is not affected.

📦 What is this software?

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete compromise of sensitive communications data including credentials, call metadata, and configuration information between affected devices.

🟠

Likely Case

Interception and potential modification of voice/video communications and administrative traffic between devices.

🟢

If Mitigated

Limited impact with proper network segmentation and certificate validation controls in place.

🌐 Internet-Facing: HIGH

🏢 Internal Only: MEDIUM

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ⚠️ Yes

Complexity: MEDIUM

Requires man-in-the-middle position and ability to intercept traffic between devices.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Refer to Cisco security advisory for specific fixed versions

Vendor Advisory: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6

Restart Required: Yes

Instructions:

1. Download appropriate software update from Cisco. 2. Backup current configuration. 3. Apply update following Cisco documentation. 4. Verify certificate validation is functioning correctly.

🔧 Temporary Workarounds

No workarounds available

all

Cisco states there are no workarounds that address this vulnerability

🧯 If You Can't Patch

Implement strict network segmentation to isolate affected devices from untrusted networks
Monitor for unusual certificate validation failures or man-in-the-middle indicators

🔍 How to Verify

Check if Vulnerable:

Check device version against Cisco advisory and verify if connecting to Unified Communications Manager

Check Version:

show version (Cisco CLI command)

Verify Fix Applied:

Verify software version is updated to patched version and test certificate validation functionality

📡 Detection & Monitoring

Log Indicators:

Certificate validation failures
Unexpected certificate changes
Connection resets between devices

Network Indicators:

Unusual traffic patterns between Expressway/VCS and Unified Communications Manager
Self-signed certificates in TLS handshakes

SIEM Query:

Search for: certificate validation errors OR TLS handshake failures between affected devices

📊 Metadata

CVE ID: CVE-2022-20814

CVSS v3 Score: 7.4 (HIGH)

CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

CWE: CWE-295

Published: November 15, 2024

Last Updated: July 31, 2025

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

Telepresence Video Communication Server by Cisco

⚠️ Risk & Real-World Impact

Worst Case

Likely Case

If Mitigated

🎯 Exploit Status

🛠️ Fix & Mitigation

✅ Official Fix

Instructions:

🔧 Temporary Workarounds

No workarounds available

🧯 If You Can't Patch

🔍 How to Verify

Check if Vulnerable:

Check Version:

Verify Fix Applied:

📡 Detection & Monitoring

Log Indicators: