VYPR
← All advisories
High severity7.8CISA KEVNVD Advisory· Published Sep 30, 2022· Updated Jun 17, 2026

CVE-2022-20775

CVE-2022-20775

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.

This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

16
  • Cisco Systems, Inc./Catalyst SD-WAN Manager4 versions
    cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*range: <20.6.3
    • cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.8:*:*:*:*:*:*:*
    • (no CPE)range: 18.3.1
    • (no CPE)range: 20.1.12
  • Cisco Systems, Inc./SD-WAN2 versions
    cpe:2.3:a:cisco:sd-wan:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:sd-wan:*:*:*:*:*:*:*:*range: <20.6.3
    • cpe:2.3:a:cisco:sd-wan:20.8:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Sd Wan Vbond Orchestrator2 versions
    cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*range: <20.6.3
    • cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:20.8:*:*:*:*:*:*:*
  • Cisco Systems, Inc./Sd Wan Vedge Cloud3 versions
    cpe:2.3:a:cisco:sd-wan_vedge_cloud:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:cisco:sd-wan_vedge_cloud:*:*:*:*:*:*:*:*range: <20.6.3
    • cpe:2.3:a:cisco:sd-wan_vedge_cloud:20.8:*:*:*:*:*:*:*
    • (no CPE)range: 19.2.1
  • Cisco Systems, Inc./vSmart Controller Software2 versions
    cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*range: <20.6.3
    • cpe:2.3:a:cisco:sd-wan_vsmart_controller:20.8:*:*:*:*:*:*:*
  • Cisco Systems, Inc./SD-WAN Softwarellm-fuzzy
  • Cisco/Cisco SD-WAN vContainerv5
    Range: 18.4.5
  • Cisco Systems, Inc./Sd Wan Vedge Routercpe-rescue
    Range: 18.4.303

Patches

Vulnerability mechanics

References

4

News mentions

10