1. Home
  2. CVE Database
  3. CVE-2022-20818
HIGH · 7.8

CVE-2022-20818

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on comm...

Vulnerability Description

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

CVSS Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoSd-Wan Vbond Orchestrator< 20.9
CiscoSd-Wan Vmanage< 20.9
CiscoSd-Wan Vsmart Controller< 20.9
CiscoSd-Wan< 20.9
CiscoCatalyst 8000V Edge-
CiscoCatalyst Cg418-E-
CiscoCatalyst Cg522-E-
Cisco1100-4G Integrated Services Router-
Cisco1100-4P Integrated Services Router-
Cisco1100-6G Integrated Services Router-
Cisco1100-8P Integrated Services Router-
Cisco1100 Integrated Services Router-
Cisco1101-4P Integrated Services Router-
Cisco1101 Integrated Services Router-
Cisco1109-2P Integrated Services Router-
Cisco1109-4P Integrated Services Router-
Cisco1109 Integrated Services Router-
Cisco1111X-8P Integrated Services Router-
Cisco1111X Integrated Services Router-
Cisco111X Integrated Services Router-

Related Weaknesses (CWE)

CWE-25CWE-22

References

FAQ

What is CVE-2022-20818?

CVE-2022-20818 is a vulnerability with a CVSS score of 7.8 (HIGH). Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on comm...

How severe is CVE-2022-20818?

CVE-2022-20818 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-20818?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Sd-Wan Vbond Orchestrator, Cisco Sd-Wan Vmanage, Cisco Sd-Wan Vsmart Controller, Cisco Sd-Wan, Cisco Catalyst 8000V Edge.