HIGH

CVE-2022-20775

Cisco Catalyst Sd Wan Manager 2022-09-30 CVSS v3.1

CVSS

7.8

KEV

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.

This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF

Summary dbcve.org

Improper access control in Cisco SD-WAN CLI allows an authenticated local attacker to execute arbitrary commands as root by running maliciously crafted CLI commands, resulting in complete system compromise through privilege escalation.

Mitigation

Apply the Cisco software updates that address this vulnerability; there are no available workarounds.

Proof of Concept

Weakness (CWE)

CWE-25

CWE-22 Path Traversal

EPSS Score

12.48%

Probability of exploitation in next 30 days

96.1th percentile

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF Vendor Advisory https://github.com/orangecertcc/security-research/security/advisories/GHSA-wmjv-552v-pxjc Exploit, Third Party Advisory https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF Vendor Advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-20775 US Government Resource

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE