CVE-2022-20656

Summary

CVE-2022-20656 is a vulnerability affecting the web-based management interface of Cisco PI and Cisco EPNM. This issue allows authenticated, remote attackers to execute a path traversal attack on susceptible devices, which could result in writing arbitrary files to the host system. The vulnerability stems from insufficient input validation of HTTPS URLs by the interface. Malicious actors could exploit this flaw by sending specially crafted requests with directory traversal characters, potentially compromising the affected device. Cisco has released patches to mitigate these vulnerabilities, and there are currently no workarounds available.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.