High severity8.8NVD Advisory· Published Aug 25, 2022· Updated Jun 17, 2026

CVE-2022-20921

Description

A vulnerability in the API implementation of Cisco ACI Multi-Site Orchestrator (MSO) could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to improper authorization on specific APIs. An attacker could exploit this vulnerability by sending crafted HTTP requests. A successful exploit could allow an attacker who is authenticated with non-Administrator privileges to elevate to Administrator privileges on an affected device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Aci Multi Site Orchestrator
cpe:2.3:a:cisco:aci_multi-site_orchestrator:*:*:*:*:*:*:*:*
Range: <3.1\(1n\)
Cisco Systems, Inc./ACI Multi-Site Orchestrator (MSO)llm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: n/a

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-prvesc-BPFp9cZsnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000