cisco-sa-cli-cmdinj-4MttWZPB

csafUScisco_csaf

Multiple Cisco Products CLI Command Injection Vulnerability

view advisory published 2022-01-19

A vulnerability in the implementation of the CLI for multiple Cisco products could allow an authenticated, local attacker to perform a command injection attack. This vulnerability is due to insufficient validation of a process argument on an affected product. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the management framework process, which are commonly root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2022-20655US——
A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnera…
02

references

External citations — patches, advisories, analysis.

03

remediations (40)

  • FixedCisco Carrier Packet Transport

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Catalyst SD-WAN

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Catalyst SD-WAN Manager

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Enterprise NFV Infrastructure Software

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco 1000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco 4000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco ASR 1000 Series Aggregation Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco Integrated Services Virtual Router

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco 1000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco 4000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco ASR 1000 Series Aggregation Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco Cloud Services Router 1000V Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco Integrated Services Virtual Router

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco 1000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco 4000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco ASR 1000 Series Aggregation Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco Cloud Services Router 1000V Series

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco Integrated Services Virtual Router

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.11.1f when installed on Cisco 4000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco 1000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco 4000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco ASR 1000 Series Aggregation Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco Integrated Services Virtual Router

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco 1000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco 4000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco ASR 1000 Series Aggregation Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco Integrated Services Virtual Router

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco 1000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco 4000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco ASR 1000 Series Aggregation Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco Integrated Services Virtual Router

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco 1000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco 4000 Series Integrated Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco ASR 1000 Series Aggregation Services Routers

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco Integrated Services Virtual Router

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco IOS XR Software

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Network Services Orchestrator

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco SD-WAN vEdge Router

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Ultra Gateway Platform

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Virtual Topology System (VTS)

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan