cisco telepresence-video-communication-server CVE-2022-22809 vulnerability in Cisco Products
Published on February 9, 2022

A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow modifications of the touch configurations in an unauthorized manner when an attacker attempts to modify the touch configurations. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

NVD

Weakness Type

Missing Authentication for Critical Function

The software does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.


Products Associated with CVE-2022-22809

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2022-22809 are published in these products:

Cisco Telepresence Video Communication Server
 
Cisco Expressway
 

Exploit Probability

EPSS
0.51%
Percentile
65.86%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.