CVE-2022-20754

CVE-2022-20754 describes multiple critical vulnerabilities in Cisco Expressway Series and TelePresence Video Communication Server (VCS) that allow authenticated, remote attackers with read/write privileges to achieve arbitrary file writing or root-level code execution. With a CVSS score of 7.2 (High), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness among security researchers. It is not listed on the CISA KEV catalog.