Sign-up

ID

VAR-202209-1881


CVE

CVE-2022-20830


TITLE

Cisco Systems  Cisco Catalyst SD-WAN Manager  and  Cisco SD-WAN vManage  Vulnerability regarding lack of authentication for critical features in

Trust: 0.8

sources: JVNDB: JVNDB-2022-018917

DESCRIPTION

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC without authentication. This vulnerability exists because the GUI is accessible on self-managed cloud installations or local server installations of Cisco vManage. An attacker could exploit this vulnerability by accessing the exposed GUI of Cisco SD-AVC. A successful exploit could allow the attacker to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses. Cisco vManage is a highly customizable dashboard from Cisco. Simplifies and automates Cisco SD-WAN deployment, configuration, management, and operations. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-avc-NddSGB8

Trust: 1.8

sources: NVD: CVE-2022-20830 // JVNDB: JVNDB-2022-018917 // VULHUB: VHN-405383 // VULMON: CVE-2022-20830

AFFECTED PRODUCTS

vendor:ciscomodel:catalyst sd-wan managerscope:ltversion:20.6.1

Trust: 1.0

vendor:ciscomodel:catalyst sd-wan managerscope:eqversion:20.7

Trust: 1.0

vendor:ciscomodel:catalyst sd-wan managerscope:gteversion:20.4

Trust: 1.0

vendor:ciscomodel:sd-wan vmanagescope:gteversion:18.4

Trust: 1.0

vendor:ciscomodel:sd-wan vmanagescope:ltversion:20.3.4.1

Trust: 1.0

vendor:シスコシステムズmodel:cisco sd-wan vmanagescope:eqversion:18.4 that's all 20.3.4.1

Trust: 0.8

vendor:シスコシステムズmodel:cisco catalyst sd-wan managerscope: - version: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-018917 // NVD: CVE-2022-20830

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2022-20830
value: MEDIUM

Trust: 1.0

ykramarz@cisco.com: CVE-2022-20830
value: MEDIUM

Trust: 1.0

NVD: CVE-2022-20830
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202209-2900
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2022-20830
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 1.4
version: 3.1

Trust: 2.0

NVD: CVE-2022-20830
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-018917 // CNNVD: CNNVD-202209-2900 // NVD: CVE-2022-20830 // NVD: CVE-2022-20830

PROBLEMTYPE DATA

problemtype:CWE-306

Trust: 1.1

problemtype:Lack of authentication for critical features (CWE-306) [NVD evaluation ]

Trust: 0.8

sources: VULHUB: VHN-405383 // JVNDB: JVNDB-2022-018917 // NVD: CVE-2022-20830

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202209-2900

TYPE

access control error

Trust: 0.6

sources: CNNVD: CNNVD-202209-2900

PATCH

title:cisco-sa-sdwan-avc-NddSGB8url:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-avc-NddSGB8

Trust: 0.8

title:Cisco vManage Fixes for access control error vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=209357

Trust: 0.6

title:Cisco: Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerabilityurl:https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-sdwan-avc-NddSGB8

Trust: 0.1

sources: VULMON: CVE-2022-20830 // JVNDB: JVNDB-2022-018917 // CNNVD: CNNVD-202209-2900

EXTERNAL IDS

db:NVDid:CVE-2022-20830

Trust: 3.4

db:JVNDBid:JVNDB-2022-018917

Trust: 0.8

db:CNNVDid:CNNVD-202209-2900

Trust: 0.7

db:AUSCERTid:ESB-2022.4846

Trust: 0.6

db:VULHUBid:VHN-405383

Trust: 0.1

db:VULMONid:CVE-2022-20830

Trust: 0.1

sources: VULHUB: VHN-405383 // VULMON: CVE-2022-20830 // JVNDB: JVNDB-2022-018917 // CNNVD: CNNVD-202209-2900 // NVD: CVE-2022-20830

REFERENCES

url:https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-sdwan-avc-nddsgb8

Trust: 2.4

url:https://nvd.nist.gov/vuln/detail/cve-2022-20830

Trust: 0.8

url:https://www.auscert.org.au/bulletins/esb-2022.4846

Trust: 0.6

url:https://cxsecurity.com/cveshow/cve-2022-20830/

Trust: 0.6

sources: VULHUB: VHN-405383 // VULMON: CVE-2022-20830 // JVNDB: JVNDB-2022-018917 // CNNVD: CNNVD-202209-2900 // NVD: CVE-2022-20830

SOURCES

db:VULHUBid:VHN-405383
db:VULMONid:CVE-2022-20830
db:JVNDBid:JVNDB-2022-018917
db:CNNVDid:CNNVD-202209-2900
db:NVDid:CVE-2022-20830

LAST UPDATE DATE

2024-08-14T14:02:21.228000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-405383date:2022-10-13T00:00:00
db:JVNDBid:JVNDB-2022-018917date:2023-10-24T00:59:00
db:CNNVDid:CNNVD-202209-2900date:2022-10-14T00:00:00
db:NVDid:CVE-2022-20830date:2023-11-07T03:43:04.793

SOURCES RELEASE DATE

db:VULHUBid:VHN-405383date:2022-10-10T00:00:00
db:JVNDBid:JVNDB-2022-018917date:2023-10-24T00:00:00
db:CNNVDid:CNNVD-202209-2900date:2022-09-28T00:00:00
db:NVDid:CVE-2022-20830date:2022-10-10T21:15:10.063