← Back

CVE-2022-20716

nvd nist
Published: Apr 15, 2022Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.

Affected (8)

Cisco
7 products
Catalyst Sd Wan Manager
Sd Wan Solution
Sd Wan Vbond Orchestrator
Sd Wan Vedge Cloud
Sd Wan Vedge Router
Sd Wan Vsmart Controller Software
Sd Wan
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Catalyst Sd Wan Manager
All versions
Sd Wan Solution
All versions
Sd Wan Vbond Orchestrator
All versions
Sd Wan Vedge Cloud
All versions
Sd Wan Vedge Router
All versions
Sd Wan Vsmart Controller Software
All versions
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Sd Wan
From 18.4 to 20.6.1
Sd Wan
From 20.7 to 20.7.1

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.