7.8 High

CVE-2022-20818 Cisco SD-WAN Software Privilege Escalation Vulnerabilities

Description

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

CVSS 3.1 detail

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitable with local access to the machine, with an ordinary account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector: Local
Attack complexity: Low
Privileges required: Low
Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

Affected products and versions

Product	Affected versions	Fixed in
Cisco SD-WAN Solution	Versions not published

References

20220928 Cisco SD-WAN Software Privilege Escalation Vulnerabilities tools.cisco.com

Timeline

Published September 30, 2022
Last modified November 3, 2026

The 55 CVEs of Cisco SD-WAN Solution →

CVE-2023-20262 A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to… 5.3 Medium CVE-2022-20850 A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an… 5.5 Medium CVE-2022-20775 Cisco SD-WAN Path Traversal Vulnerability 7.8 High CVE-2022-20716 A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated… 7.8 High

Track this CVE