Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-20775

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

Published

2022-09-30T19:15:11.467

Last Modified

2024-11-21T06:43:31.933

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-25
Type: Primary
CWE-22

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	cisco	catalyst_sd-wan_manager	< 20.6.3	Yes
Application	cisco	catalyst_sd-wan_manager	< 20.7.2	Yes
Application	cisco	catalyst_sd-wan_manager	20.8	Yes
Application	cisco	sd-wan_vbond_orchestrator	< 20.6.3	Yes
Application	cisco	sd-wan_vbond_orchestrator	< 20.7.2	Yes
Application	cisco	sd-wan_vbond_orchestrator	20.8	Yes
Application	cisco	sd-wan_vsmart_controller	< 20.6.3	Yes
Application	cisco	sd-wan_vsmart_controller	< 20.7.2	Yes
Application	cisco	sd-wan_vsmart_controller	20.8	Yes
Application	cisco	sd-wan	< 20.6.3	Yes
Application	cisco	sd-wan	< 20.7.2	Yes
Application	cisco	sd-wan	20.8	Yes
Application	cisco	catalyst_8000v_edge	-	No
Application	cisco	catalyst_cg418-e	-	No
Application	cisco	catalyst_cg522-e	-	No
Hardware	cisco	1100-4g_integrated_services_router	-	No
Hardware	cisco	1100-4p_integrated_services_router	-	No
Hardware	cisco	1100-6g_integrated_services_router	-	No
Hardware	cisco	1100-8p_integrated_services_router	-	No
Hardware	cisco	1100_integrated_services_router	-	No
Hardware	cisco	1101-4p_integrated_services_router	-	No
Hardware	cisco	1101_integrated_services_router	-	No
Hardware	cisco	1109-2p_integrated_services_router	-	No
Hardware	cisco	1109-4p_integrated_services_router	-	No
Hardware	cisco	1109_integrated_services_router	-	No
Hardware	cisco	1111x-8p_integrated_services_router	-	No
Hardware	cisco	1111x_integrated_services_router	-	No
Hardware	cisco	111x_integrated_services_router	-	No
Hardware	cisco	1120_integrated_services_router	-	No
Hardware	cisco	1131_integrated_services_router	-	No
Hardware	cisco	1160_integrated_services_router	-	No
Hardware	cisco	4000_integrated_services_router	-	No
Hardware	cisco	4221_integrated_services_router	-	No
Hardware	cisco	4321\/k9-rf_integrated_services_router	-	No
Hardware	cisco	4321\/k9-ws_integrated_services_router	-	No
Hardware	cisco	4321\/k9_integrated_services_router	-	No
Hardware	cisco	4321_integrated_services_router	-	No
Hardware	cisco	4331\/k9-rf_integrated_services_router	-	No
Hardware	cisco	4331\/k9-ws_integrated_services_router	-	No
Hardware	cisco	4331\/k9_integrated_services_router	-	No
Hardware	cisco	4331_integrated_services_router	-	No
Hardware	cisco	4351\/k9-rf_integrated_services_router	-	No
Hardware	cisco	4351\/k9-ws_integrated_services_router	-	No
Hardware	cisco	4351\/k9_integrated_services_router	-	No
Hardware	cisco	4351_integrated_services_router	-	No
Hardware	cisco	4431_integrated_services_router	-	No
Hardware	cisco	4451-x_integrated_services_router	-	No
Hardware	cisco	4451_integrated_services_router	-	No
Hardware	cisco	4461_integrated_services_router	-	No
Hardware	cisco	8101-32fh	-	No
Hardware	cisco	8101-32h	-	No
Hardware	cisco	8102-64h	-	No
Hardware	cisco	8201	-	No
Hardware	cisco	8201-32fh	-	No
Hardware	cisco	8202	-	No
Hardware	cisco	8804	-	No
Hardware	cisco	8808	-	No
Hardware	cisco	8812	-	No
Hardware	cisco	8818	-	No
Hardware	cisco	8831	-	No
Hardware	cisco	asr_1000	-	No
Hardware	cisco	asr_1000-x	-	No
Hardware	cisco	asr_1001	-	No
Hardware	cisco	asr_1001-hx	-	No
Hardware	cisco	asr_1001-hx_r	-	No
Hardware	cisco	asr_1001-x	-	No
Hardware	cisco	asr_1001-x_r	-	No
Hardware	cisco	asr_1002	-	No
Hardware	cisco	asr_1002-hx	-	No
Hardware	cisco	asr_1002-hx_r	-	No
Hardware	cisco	asr_1002-x	-	No
Hardware	cisco	asr_1002-x_r	-	No
Hardware	cisco	asr_1004	-	No
Hardware	cisco	asr_1006	-	No
Hardware	cisco	asr_1006-x	-	No
Hardware	cisco	asr_1009-x	-	No
Hardware	cisco	asr_1013	-	No
Hardware	cisco	asr_1023	-	No
Hardware	cisco	catalyst_8200	-	No
Hardware	cisco	catalyst_8300	-	No
Hardware	cisco	catalyst_8300-1n1s-4t2x	-	No
Hardware	cisco	catalyst_8300-1n1s-6t	-	No
Hardware	cisco	catalyst_8300-2n2s-4t2x	-	No
Hardware	cisco	catalyst_8300-2n2s-6t	-	No
Hardware	cisco	catalyst_8500	-	No
Hardware	cisco	catalyst_8500-4qc	-	No
Hardware	cisco	catalyst_8500l	-	No
Hardware	cisco	catalyst_8510csr	-	No
Hardware	cisco	catalyst_8510msr	-	No
Hardware	cisco	catalyst_8540csr	-	No
Hardware	cisco	catalyst_8540msr	-	No

References

https://github.com/orangecertcc/security-research/security/advisories/GHSA-wmjv-552v-pxjc Exploit, Third Party Advisory ([email protected])
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF Vendor Advisory ([email protected])
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF Vendor Advisory ([email protected])
https://github.com/orangecertcc/security-research/security/advisories/GHSA-wmjv-552v-pxjc Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)