peter bassill · operator
$ cve CVE-2022-20775 JSON

CVE-2022-20775 KEV

7.8
HIGH · CVSS 3.1 · EPSS 12.5% (pctl 96)

Patch first

On CISA KEV — known exploited in the wild, due 2026-02-27.

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF

Scoring

CVSS7.8 (HIGH, v3.1)
VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS12.48% — more likely to be exploited than 96% of all CVEs
WeaknessCWE-25
On CISA KEVyes — remediate by 2026-02-27
Public exploitnone known
Published2022-09-30
Last modified2026-06-17

CISA KEV

NameCisco SD-WAN Path Traversal Vulnerability
Added2026-02-25
Due2026-02-27
Vendor / productCisco / SD-WAN
Ransomware usenone reported

Affected (40)

VendorProduct
cisco1100 integrated services router
cisco1100-4g integrated services router
cisco1100-4p integrated services router
cisco1100-6g integrated services router
cisco1100-8p integrated services router
cisco1101 integrated services router
cisco1101-4p integrated services router
cisco1109 integrated services router
cisco1109-2p integrated services router
cisco1109-4p integrated services router
cisco1111x integrated services router
cisco1111x-8p integrated services router
cisco111x integrated services router
cisco1120 integrated services router
cisco1131 integrated services router
cisco1160 integrated services router
cisco4000 integrated services router
cisco4221 integrated services router
cisco4321 integrated services router
cisco4321\/k9 integrated services router
cisco4321\/k9-rf integrated services router
cisco4321\/k9-ws integrated services router
cisco4331 integrated services router
cisco4331\/k9 integrated services router
cisco4331\/k9-rf integrated services router
cisco4331\/k9-ws integrated services router
cisco4351 integrated services router
cisco4351\/k9 integrated services router
cisco4351\/k9-rf integrated services router
cisco4351\/k9-ws integrated services router
cisco4431 integrated services router
cisco4451-x integrated services router
ciscocatalyst 8000v edge
ciscocatalyst cg418-e
ciscocatalyst cg522-e
ciscocatalyst sd-wan manager
ciscosd-wan
ciscosd-wan vbond orchestrator
ciscosd-wan vedge cloud
ciscosd-wan vsmart controller

References

→ the Explorer  ·  watch your stack  ·  NVD