{ "id": "CVE-2022-20775", "published": "2022-09-30 19:15:11", "last_modified": "2026-06-17 04:25:04", "cvss_score": "7.8", "cvss_severity": "HIGH", "cvss_version": "3.1", "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-25", "description": "A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.\r\n\r\nThis vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "epss_score": "0.12475", "epss_percentile": "0.96085", "kev": 1, "kev_due": "2026-02-27", "has_exploit": 0, "updated_at": "2026-09-27 18:17:32", "priority": { "rank": 1, "label": "Patch first", "why": "On CISA KEV — known exploited in the wild, due 2026-02-27." }, "products": [ { "vendor": "cisco", "product": "1100_integrated_services_router" }, { "vendor": "cisco", "product": "1100-4g_integrated_services_router" }, { "vendor": "cisco", "product": "1100-4p_integrated_services_router" }, { "vendor": "cisco", "product": "1100-6g_integrated_services_router" }, { "vendor": "cisco", "product": "1100-8p_integrated_services_router" }, { "vendor": "cisco", "product": "1101_integrated_services_router" }, { "vendor": "cisco", "product": "1101-4p_integrated_services_router" }, { "vendor": "cisco", "product": "1109_integrated_services_router" }, { "vendor": "cisco", "product": "1109-2p_integrated_services_router" }, { "vendor": "cisco", "product": "1109-4p_integrated_services_router" }, { "vendor": "cisco", "product": "1111x_integrated_services_router" }, { "vendor": "cisco", "product": "1111x-8p_integrated_services_router" }, { "vendor": "cisco", "product": "111x_integrated_services_router" }, { "vendor": "cisco", "product": "1120_integrated_services_router" }, { "vendor": "cisco", "product": "1131_integrated_services_router" }, { "vendor": "cisco", "product": "1160_integrated_services_router" }, { "vendor": "cisco", "product": "4000_integrated_services_router" }, { "vendor": "cisco", "product": "4221_integrated_services_router" }, { "vendor": "cisco", "product": "4321_integrated_services_router" }, { "vendor": "cisco", "product": "4321\\/k9_integrated_services_router" }, { "vendor": "cisco", "product": "4321\\/k9-rf_integrated_services_router" }, { "vendor": "cisco", "product": "4321\\/k9-ws_integrated_services_router" }, { "vendor": "cisco", "product": "4331_integrated_services_router" }, { "vendor": "cisco", "product": "4331\\/k9_integrated_services_router" }, { "vendor": "cisco", "product": "4331\\/k9-rf_integrated_services_router" }, { "vendor": "cisco", "product": "4331\\/k9-ws_integrated_services_router" }, { "vendor": "cisco", "product": "4351_integrated_services_router" }, { "vendor": "cisco", "product": "4351\\/k9_integrated_services_router" }, { "vendor": "cisco", "product": "4351\\/k9-rf_integrated_services_router" }, { "vendor": "cisco", "product": "4351\\/k9-ws_integrated_services_router" }, { "vendor": "cisco", "product": "4431_integrated_services_router" }, { "vendor": "cisco", "product": "4451-x_integrated_services_router" }, { "vendor": "cisco", "product": "catalyst_8000v_edge" }, { "vendor": "cisco", "product": "catalyst_cg418-e" }, { "vendor": "cisco", "product": "catalyst_cg522-e" }, { "vendor": "cisco", "product": "catalyst_sd-wan_manager" }, { "vendor": "cisco", "product": "sd-wan" }, { "vendor": "cisco", "product": "sd-wan_vbond_orchestrator" }, { "vendor": "cisco", "product": "sd-wan_vedge_cloud" }, { "vendor": "cisco", "product": "sd-wan_vsmart_controller" } ], "kev_detail": { "cve_id": "CVE-2022-20775", "date_added": "2026-02-25", "due_date": "2026-02-27", "vendor": "Cisco", "product": "SD-WAN", "name": "Cisco SD-WAN Path Traversal Vulnerability", "ransomware": 0 }, "exploits": [], "refs_list": [ "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://github.com/orangecertcc/security-research/security/advisories/GHSA-wmjv-552v-pxjc", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://github.com/orangecertcc/security-research/security/advisories/GHSA-wmjv-552v-pxjc", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF", "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-20775" ] }