CVE-2022-20626

Summary

CVE-2022-20626 is a vulnerability affecting the web-based management interface of Cisco Prime Access Registrar Appliance. An authenticated, remote attacker can execute a cross-site scripting (XSS) attack against a user of the interface, requiring valid credentials for the device. The vulnerability arises from insufficient input validation by the interface, which could allow the attacker to inject arbitrary script code or access sensitive information. Successful exploitation could lead to significant security implications. Cisco has released software updates to address this vulnerability, and no workarounds are available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.