CVE-2022-20655

highPriorität · verfolgen · 0EPSS 0.008 · 57. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.83% (57th) EPSS

CVSS 8.8 · high

Is it mine?

128 products

Prüfe deine Angriffsfläche

Who says so?

4 sources

cnnvd · enisa_euvd · fstec_bdu · cisco_csaf

EPSS · bewertet 2026-10-27

A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenCisco Carrier Packet Transportcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Catalyst SD-WANcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Catalyst SD-WAN Managercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Enterprise NFV Infrastructure Softwarecisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco 1000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco 4000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco ASR 1000 Series Aggregation Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.10.1 when installed on Cisco Integrated Services Virtual Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco 1000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco 4000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco ASR 1000 Series Aggregation Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco Cloud Services Router 1000V Seriescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1a when installed on Cisco Integrated Services Virtual Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco 1000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco 4000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco ASR 1000 Series Aggregation Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco Cloud Services Router 1000V Seriescisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1b when installed on Cisco Integrated Services Virtual Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.11.1f when installed on Cisco 4000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco 1000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco 4000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco ASR 1000 Series Aggregation Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.1 when installed on Cisco Integrated Services Virtual Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco 1000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco 4000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco ASR 1000 Series Aggregation Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.2 when installed on Cisco Integrated Services Virtual Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco 1000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco 4000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco ASR 1000 Series Aggregation Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.3 when installed on Cisco Integrated Services Virtual Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco 1000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco 4000 Series Integrated Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco ASR 1000 Series Aggregation Services Routerscisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XE Catalyst SD-WAN 16.9.4 when installed on Cisco Integrated Services Virtual Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco IOS XR Softwarecisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Network Services Orchestratorcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco SD-WAN vEdge Routercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Ultra Gateway Platformcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco Virtual Topology System (VTS)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenCisco ConfDcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.18.8highAV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.18.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · ENISA EU

v3.18.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · psirt@cisco.com USAusnutzbarkeit 2 · Auswirkung 6

v3.18.1highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:Hsecondary · Cisco PSIRT US

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-78USCWE-78US

betroffene Produkte (128)

Betroffene Produkte und Versionsbereiche.

20 von 128 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

cisco-sa-cli-cmdinj-4MttWZPBMultiple Cisco Products CLI Command Injection Vulnerability2022-01-19csaf · cisco_csafUS
A vulnerability in the implementation of the CLI for multiple Cisco products could allow an authenticated, local attacker to perform a command injection attack. This vulnerability is due to insufficient validation of a process argument on an affected product. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of the management framework process, which are commonly root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
cisco-sa-confdcli-cmdinj-wybQDSShConfD CLI Command Injection Vulnerability2022-01-19csaf · cisco_csafUS
A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-confdcli-cmdinj-wybQDSSh ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-confdcli-cmdinj-wybQDSSh"]

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisco_csaf NVD CVE.org MITRE

veröffentlicht 2024-11-15geändert 2026-06-17

Referenzen (10)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan