CVE-2022-20830: Cisco Software-Defined Application Visibility and Control on Cisco vManage Authentication Bypass Vulnerability

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-10-10 · updated 2026-06-17
Weakness: CWE-306

Description

A vulnerability in authentication mechanism of Cisco Software-Defined Application Visibility and Control (SD-AVC) on Cisco vManage could allow an unauthenticated, remote attacker to access the GUI of Cisco SD-AVC without authentication. This vulnerability exists because the GUI is accessible on self-managed cloud installations or local server installations of Cisco vManage. An attacker could exploit this vulnerability by accessing the exposed GUI of Cisco SD-AVC. A successful exploit could allow the attacker to view managed device names, SD-AVC logs, and SD-AVC DNS server IP addresses.

Affected products

Cisco Catalyst SD-WAN Manager: from 20.4 before 20.6.1; 20.7 — fixed in 20.6.1
Cisco Sd-Wan Vmanage: from 18.4 before 20.3.4.1 — fixed in 20.3.4.1

How to fix

Upgrade to a fixed version: Cisco Catalyst SD-WAN Manager 20.6.1; Cisco Sd-Wan Vmanage 20.3.4.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-20830 or the next vulnerability affects your stack