Cisco Enterprise Chat and Email up to 12.6(1)_ET1 Web-based Management Interface response discrepancy

Summaryinfo

A vulnerability classified as problematic has been found in Cisco Enterprise Chat and Email. This affects an unknown function of the component Web-based Management Interface. Performing a manipulation results in response discrepancy. This vulnerability is reported as CVE-2022-20633. The attack is possible to be carried out remotely. No exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in Cisco Enterprise Chat and Email. This affects some unknown processing of the component Web-based Management Interface. The manipulation with an unknown input leads to a response discrepancy vulnerability. CWE is classifying the issue as CWE-204. The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere. This is going to have an impact on confidentiality. The summary by CVE is:

A vulnerability in the web-based management interface of Cisco ECE could allow an unauthenticated, remote attacker to perform a username enumeration attack against an affected device. This vulnerability is due to differences in authentication responses that are sent back from the application as part of an authentication attempt. An attacker could exploit this vulnerability by sending authentication requests to an affected device. A successful exploit could allow the attacker to confirm existing user accounts, which could be used in further attacks. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

It is possible to read the advisory at sec.cloudapps.cisco.com. This vulnerability is uniquely identified as CVE-2022-20633 since 11/02/2021. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

Upgrading eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Chat Software

Vendor

• Cisco

Name

• Enterprise Chat and Email

Version

• 11.5(1)
• 11.6(1)
• 11.6(1)_ES2
• 11.6(1)_ES3
• 11.6(1)_ES4
• 11.6(1)_ES5
• 11.6(1)_ES6
• 11.6(1)_ES7
• 11.6(1)_ES8
• 11.6(1)_ES9
• 11.6(1)_ES9a
• 11.6(1)_ES10
• 11.6(1)_ES11
• 12.0(1)
• 12.0(1)_ES1
• 12.0(1)_ES2
• 12.0(1)_ES3
• 12.0(1)_ES4
• 12.0(1)_ES5
• 12.0(1)_ES5a
• 12.0(1)_ES6
• 12.0(1)_ES6_ET1
• 12.5(1)
• 12.5(1)_ES1
• 12.5(1)_ES2
• 12.5(1)_ES3
• 12.5(1)_ES3_ET1
• 12.5(1)_ET1
• 12.6(1)
• 12.6(1)_ET1

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion