{"uuid": "053c1c8c-2801-4a1f-a7b5-1f070480b580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20825", "type": "seen", "source": "https://t.me/hacking_Attack/68348", "content": "Black Hat Ethical Hacking\nCisco won\u2019t fix authentication bypass zero-day in EoL routers\n\nCisco won\u2019t fix authentication bypass zero-day in EoL routersPost Views: 3 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes Cisco says that a new authentication bypass flaw affecting multiple small business VPN routers will not be patched because the devices have reached end-of-life (EoL).This zero-day bug (CVE-2022-20923) is caused by a faulty password validation algorithm that attackers could exploit to log into the VPN on vulnerable devices using what the company describes as \u201ccrafted credentials\u201d if the IPSec VPN Server feature is enabled.\n\n\u201cA successful exploit could allow the attacker to bypass authentication and access the IPSec VPN network,\u201d Cisco explained in a security advisory issued on Wednesday.\n\n\u201cThe attacker may obtain privileges that are the same level as an administrative user, depending on the crafted credentials that are used.\u201d\n\nTo determine if the IPSec VPN Server is enabled on a router, you have to log in to the web-based management interface and go to VPN > IPSec VPN Server > Setup.\n\nIf the \u201cServer Enable\u201d check box is checked, the device is exposed to CVE-2022-20923 exploitation attempts.\n\nLuckily, Cisco says that its Product Security Incident Response Team (PSIRT) found no evidence of publicly available proof-of-concept exploits for this zero-day or any threat actors exploiting the bug in the wild until the advisory was published.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course Upgrade to newer router models for protectionCisco asked customers still using the RV110W, RV130, RV130W, and RV215W routers affected by this security vulnerability\u00a0to upgrade to newer models still receiving security updates.\n\nAccording to an end-of-sale announcement\u00a0on Cisco\u2019s website, the last day these RV Series routers were available for order was December 2, 2019.\n\n\u201cCisco has not released and will not release software updates to address the vulnerability described in this advisory,\u201d the company added.\n\n\u201cCustomers are encouraged to migrate to Cisco Small Business RV132W, RV160, or RV160W Routers.\u201d\nTrending: Security Engineer vs. Software Engineer\nTrending: Recon Tool: ZenBuster\nCVE-2022-20923 is not the first severe security vulnerability affecting these EoL router models that Cisco left unpatched in recent years.\n\nFor instance, in August 2021, the company said it wouldn\u2019t release security patches for a critical vulnerability\u00a0(CVE-2021-34730) in these RV Series routers that enabled unauthenticated attackers to execute arbitrary code remotely as the root user, asking users to migrate to newer models.\n\nIn June 2022, Cisco again advised owners to switch to newer models\u00a0after disclosing a new critical remote code execution (RCE) vulnerability\u00a0(CVE-2022-20825) that wouldn\u2019t get patched. \nTrending: Critical command injection vulnerability discovered in Bitbucket Server and Data Center Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/09/Images-for-the-News-posts-7-300x150.png New Linux malware evades detection and deploys cryptocurrency minerSeptember 7, 2022\nReading Time:[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:38.991787Z"}