8.8
High
CVE-2022-20655 A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local…
Description
A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco IOS XR Software | Versions not published | |
| Cisco Virtual Topology System (VTS) | Versions not published | |
| Cisco Network Services Orchestrator | Versions not published | |
| Cisco Enterprise NFV Infrastructure Software | Versions not published | |
| Cisco Catalyst SD-WAN | Versions not published | |
| Cisco Catalyst SD-WAN Manager | Versions not published | |
| Cisco IOS XE Catalyst SD-WAN | Versions not published | |
| Cisco SD-WAN vEdge Router | Versions not published | |
| Cisco Ultra Gateway Platform | Versions not published |
Show the 46 other branches Hide the 46 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Carrier Packet Transport | 12.1.0 | No fix stated |
| Cisco Carrier Packet Transport | 10.8.0 | No fix stated |
| Cisco Carrier Packet Transport | 9.521 | No fix stated |
| Cisco Carrier Packet Transport 9.8 | 9.8.0 → 9.8.1 | No fix stated |
| Cisco Carrier Packet Transport | 9.7.0 | No fix stated |
| Cisco Carrier Packet Transport 9.5 | 9.5.0 → 9.5.3 | No fix stated |
| Cisco Carrier Packet Transport | 9.2.2 | No fix stated |
| Cisco Carrier Packet Transport 7.0 | 7.0.1 → 7.0.3 | No fix stated |
| Cisco Carrier Packet Transport | 6.2.4 | No fix stated |
| Cisco Carrier Packet Transport | 4.7.0 | No fix stated |
| Cisco Carrier Packet Transport | 4.6.1 | No fix stated |
| Cisco Carrier Packet Transport | 4.5.0 | No fix stated |
| Cisco Carrier Packet Transport 4.1 | 4.1 → 4.1.82 | No fix stated |
| Cisco Carrier Packet Transport 4.0 | 4.0 → 4.0.4 | No fix stated |
| Cisco Carrier Packet Transport | 3.5 | No fix stated |
| Cisco Carrier Packet Transport 3.2 | 3.2 → 3.2.1 | No fix stated |
| Cisco Carrier Packet Transport 3.1 | 3.1 → 3.1.0 | No fix stated |
| Cisco Carrier Packet Transport 3.0 | 3.0.0 → 3.0.7 | No fix stated |
| Cisco Carrier Packet Transport | 2.5 | No fix stated |
| Cisco Carrier Packet Transport | 2.4.0 | No fix stated |
| Cisco Carrier Packet Transport 2.3 | 2.3.0 → 2.3.5 | No fix stated |
| Cisco Carrier Packet Transport 2.2 | 2.2.2 → 2.2.3 | No fix stated |
| Cisco Carrier Packet Transport | 2.1.0 | No fix stated |
| Cisco Carrier Packet Transport 2.0 | 2.0 → 2.0.5 | No fix stated |
| Cisco Carrier Packet Transport | 1.4.0 | No fix stated |
| Cisco Carrier Packet Transport | 1.2 | No fix stated |
| Cisco Carrier Packet Transport 1.1 | 1.1 → 1.1.2 | No fix stated |
| Cisco Carrier Packet Transport 1.0 | 1.0 → 1.0.2 | No fix stated |
| ios_xr_software 7.1 | 7.1.0 → < 7.1.1 | 7.1.1 |
| ios_xr_software 7.0 | earliest → < 7.0.2 | 7.0.2 |
| virtual_topology_system 2.6 | earliest → < 2.6.5 | 2.6.5 |
| network_services_orchestrator 5.1 | 5.1.0 → < 5.1.0.1 | 5.1.0.1 |
| network_services_orchestrator 4.7 | 4.7.0 → < 4.7.1 | 4.7.1 |
| network_services_orchestrator 4.6 | 4.6.0 → < 4.6.1.7 | 4.6.1.7 |
| network_services_orchestrator 4.5 | 4.5.0 → < 4.5.7 | 4.5.7 |
| network_services_orchestrator 4.4 | 4.4.0.0 → < 4.4.5.6 | 4.4.5.6 |
| network_services_orchestrator 4.3 | earliest → < 4.3.9.1 | 4.3.9.1 |
| enterprise_nfv_infrastructure_software 3.12 | earliest → < 3.12.1 | 3.12.1 |
| catalyst_sd-wan_manager 19.2 | 19.2.0 → < 19.2.1 | 19.2.1 |
| catalyst_sd-wan_manager 18.4 | earliest → < 18.4.4 | 18.4.4 |
| ios_xe_catalyst_sd-wan 17.2 | 17.2.0 → < 17.2.1r | 17.2.1r |
| ios_xe_catalyst_sd-wan 16.12 | 16.12.0 → < 16.12.1b | 16.12.1b |
| ios_xe_catalyst_sd-wan 16.10 | earliest → < 16.10.2 | 16.10.2 |
| sd-wan_vedge_router 19.2 | 19.2.0 → < 19.2.1 | 19.2.1 |
| sd-wan_vedge_router 18.4 | earliest → < 18.4.4 | 18.4.4 |
| carrier_packet_transport | Versions not published |
References
- cisco-sa-cli-cmdinj-4MttWZPB sec.cloudapps.cisco.com
- cisco-sa-confdcli-cmdinj-wybQDSSh sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco IOS XR Software
The 115 CVEs of Cisco IOS XR Software →
CVE-2026-76505
A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and…
7.5
High
CVE-2026-20278
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering…
8.8
High
CVE-2026-20280
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software…
8.8
High
CVE-2026-20279
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering…
9.8
Critical