cisco-sa-sd-wan-priv-E6e8tEdF

csafUScisco_csaf

Cisco SD-WAN Software Privilege Escalation Vulnerabilities

view advisory published 2022-09-28

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-20818UShigh7.8Exploit
Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper acc…
CVE-2022-20775UShigh7.8OT criticalKEV
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access contro…
02

references

External citations — patches, advisories, analysis.

03

remediations (10)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan