7.8
High
Exploited
CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
Ransomware campaigns
Not observed so far
Weakness
CWE-282, CWE-25
Description
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco SD-WAN Solution | Versions not published | |
| Cisco Catalyst SD-WAN 20.7 | 20.7.1 → 20.7.2 | No fix stated |
| Cisco Catalyst SD-WAN 20.6 | 20.6.1 → 20.6.8 | No fix stated |
| Cisco Catalyst SD-WAN 20.5 | 20.5.1 → 20.5.1.2 | No fix stated |
| Cisco Catalyst SD-WAN 20.4 | 20.4.1 → 20.4.2.3 | No fix stated |
| Cisco Catalyst SD-WAN 20.3 | 20.3.1 → 20.3.811 | No fix stated |
| Cisco Catalyst SD-WAN 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco Catalyst SD-WAN | 19.3.0 | No fix stated |
| Cisco Catalyst SD-WAN 19.2 | 19.2.0 → 19.2.929 | No fix stated |
Show the 59 other branches Hide the 59 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Catalyst SD-WAN 19.1 | 19.1.0a → 19.1.0 | No fix stated |
| Cisco Catalyst SD-WAN | 19.0.0 | No fix stated |
| Cisco Catalyst SD-WAN 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco Catalyst SD-WAN 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco Catalyst SD-WAN | 18.2.0 | No fix stated |
| Cisco Catalyst SD-WAN 17.4 | 17.4.2ES1 → 17.4.2.2527 | No fix stated |
| Cisco Catalyst SD-WAN 17.3 | 17.3.1ESM1 → 17.3.2ESM3 | No fix stated |
| Cisco Catalyst SD-WAN 17.2 | 17.2.1LA → 17.2.10 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.7 | 20.7.1EFT2 → 20.7.1.1 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.6 | 20.6.0.18.3 → 20.6.3 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.5 | 20.5.0.1.1 → 20.5.1.2 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.4 | 20.4.1 → 20.4.2.2.4 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.3 | 20.3.1 → 20.3.814 | No fix stated |
| Cisco Catalyst SD-WAN Manager 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 19.3.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 19.2 | 19.2.0 → 19.2.929 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 19.1.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 19.0 | 19.0.0 → 19.0.1a | No fix stated |
| Cisco Catalyst SD-WAN Manager 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco Catalyst SD-WAN Manager 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco Catalyst SD-WAN Manager | 18.2.0 | No fix stated |
| Cisco Catalyst SD-WAN Manager 17.2 | 17.2.4 → 17.2.10 | No fix stated |
| Cisco SD-WAN vContainer | 20.3.1 | No fix stated |
| Cisco SD-WAN vContainer 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco SD-WAN vContainer | 19.3.0 | No fix stated |
| Cisco SD-WAN vContainer 19.2 | 19.2.0 → 19.2.099 | No fix stated |
| Cisco SD-WAN vContainer | 19.1.0 | No fix stated |
| Cisco SD-WAN vContainer 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco SD-WAN vContainer 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco SD-WAN vContainer | 18.2.0 | No fix stated |
| Cisco SD-WAN vContainer 17.2 | 17.2.4 → 17.2.10 | No fix stated |
| Cisco SD-WAN vEdge Cloud 20.7 | 20.7.1 → 20.7.2 | No fix stated |
| Cisco SD-WAN vEdge Cloud 20.6 | 20.6.1 → 20.6.8 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 20.5.1 | No fix stated |
| Cisco SD-WAN vEdge Cloud 20.4 | 20.4.1 → 20.4.2.3 | No fix stated |
| Cisco SD-WAN vEdge Cloud 20.3 | 20.3.1 → 20.3.8 | No fix stated |
| Cisco SD-WAN vEdge Cloud 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 19.3.0 | No fix stated |
| Cisco SD-WAN vEdge Cloud 19.2 | 19.2.0 → 19.2.929 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 19.1.0 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 19.0.1a | No fix stated |
| Cisco SD-WAN vEdge Cloud 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco SD-WAN vEdge Cloud 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco SD-WAN vEdge Cloud | 18.2.0 | No fix stated |
| Cisco SD-WAN vEdge Cloud 17.2 | 17.2.4 → 17.2.10 | No fix stated |
| Cisco SD-WAN vEdge Router 20.7 | 20.7.1 → 20.7.2 | No fix stated |
| Cisco SD-WAN vEdge Router 20.6 | 20.6.1 → 20.6.8 | No fix stated |
| Cisco SD-WAN vEdge Router | 20.5.1 | No fix stated |
| Cisco SD-WAN vEdge Router 20.4 | 20.4.1 → 20.4.2 | No fix stated |
| Cisco SD-WAN vEdge Router 20.3 | 20.3.1 → 20.3.8 | No fix stated |
| Cisco SD-WAN vEdge Router 20.1 | 20.1.1 → 20.1.12 | No fix stated |
| Cisco SD-WAN vEdge Router | 19.3.0 | No fix stated |
| Cisco SD-WAN vEdge Router 19.2 | 19.2.0 → 19.2.929 | No fix stated |
| Cisco SD-WAN vEdge Router 19.1 | 19.1.0 → 19.1.01 | No fix stated |
| Cisco SD-WAN vEdge Router 19.0 | 19.0.0 → 19.0.1a | No fix stated |
| Cisco SD-WAN vEdge Router 18.4 | 18.4.0 → 18.4.303 | No fix stated |
| Cisco SD-WAN vEdge Router 18.3 | 18.3.0 → 18.3.8 | No fix stated |
| Cisco SD-WAN vEdge Router | 18.2.0 | No fix stated |
| Cisco SD-WAN vEdge Router 17.2 | 17.2.4 → 17.2.10 | No fix stated |
References
- cisco-sa-sd-wan-priv-E6e8tEdF sec.cloudapps.cisco.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Cisco SD-WAN Solution
The 55 CVEs of Cisco SD-WAN Solution →
CVE-2023-20262
A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to…
5.3
Medium
CVE-2022-20850
A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an…
5.5
Medium
CVE-2022-20818
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
7.8
High
CVE-2022-20716
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated…
7.8
High