#VU67953 Exposure of Resource to Wrong Sphere in Cisco Systems, Inc products - CVE-2022-20917

Vulnerability identifier: #VU67953

Vulnerability risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-20917

CWE-ID: CWE-668

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Cisco Jabber for Windows
Client/Desktop applications / Messaging software
Cisco Jabber for MacOS
Client/Desktop applications / Messaging software
Cisco Jabber for Android and iOS
Client/Desktop applications / Messaging software
Cisco Jabber for Android MAM
Client/Desktop applications / Messaging software
Cisco Jabber for iOS MAM
Client/Desktop applications / Messaging software

Vendor: Cisco Systems, Inc

Description

The vulnerability allows a remote attacker to compromise the system.

The vulnerability exists due to the improper handling of nested Extensible Messaging and Presence Protocol (XMPP) messages. A remote user can send specially crafted XMPP messages and cause the Jabber client application to perform unsafe actions.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

Cisco Jabber for Windows: 12.5 - 14.1

Cisco Jabber for MacOS: 12.7 - 14.1

Cisco Jabber for Android and iOS: 14.1

Cisco Jabber for Android MAM: 14.1

Cisco Jabber for iOS MAM: 14.1

---

External links
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-jabber-xmpp-Ne9SCM

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.