CVE-2022-20812

Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow a remote attacker to overwrite arbitrary files or conduct null byte poisoning attacks on an affected device. Note: Cisco Expressway Series refers to the Expressway Control (Expressway-C) device and the Expressway Edge (Expressway-E) device. For more information about these vulnerabilities, see the Details section of this advisory.

• CWE-158
• CWE-22

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LHVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-csrf-sqpsSfY6Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-expressway-overwrite-3buqW8LHVendor Advisory

Published

Jul 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20807Multiple vulnerabilities in the API and web-based management…6.5
• CVE-2022-20808A vulnerability in Cisco Smart Software Manager On-Prem (SSM…6.5
• CVE-2022-20809Multiple vulnerabilities in the API and web-based management…6.5
• CVE-2022-2081A vulnerability exists in the HCI Modbus TCP function includ…7.5
• CVE-2022-20810A vulnerability in the Simple Network Management Protocol (S…6.5
• CVE-2022-20811Multiple vulnerabilities in Cisco TelePresence Collaboration…7.2
• CVE-2022-20813Multiple vulnerabilities in the API and in the web-based man…5.9
• CVE-2022-20814A vulnerability in the certificate validation of Cisco …7.4
• CVE-2022-20815A vulnerability in the web-based management interface of Cis…6.1
• CVE-2022-20816A vulnerability in the web-based management interface of Cis…8.1
• CVE-2022-20817A vulnerability in Cisco Unified IP Phones could allow an un…7.4
• CVE-2022-20818Multiple vulnerabilities in the CLI of Cisco SD-WAN Software…7.8