A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.
This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
Connections 79
has cited scope1 retained · stored CVE-2022-20775 → Cisco · Cisco SD-WAN vEdge Cloudb5898dba-ddff-42ca-a257-c773190c996a
has cited scope1 retained · stored CVE-2022-20775 → Cisco · Cisco SD-WAN vEdge Router2b572e4e-16ae-4f56-be62-6266046bb09c
has cited scope1 retained · stored CVE-2022-20775 → Cisco · Cisco Catalyst SD-WAN Manager3b93316d-dc2b-416d-80f8-a8f0cc6a99b5
has cited scope1 retained · stored CVE-2022-20775 → Cisco · Cisco Catalyst SD-WAN6256236d-1c4c-469b-a85f-723fd611e588
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 8101-32hcd6d289d-c284-4e74-9d71-5debaffa94c7
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 8201-32fh32b03c81-c3ae-4cac-8a08-79f34cb38288
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1100-4g_integrated_services_routerad697b75-7f36-4920-a215-ffbbb7c227fa
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1000bfaa40b1-f316-407d-a6b4-865a208e22a3
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4321_integrated_services_routerb0cccae6-1396-45fd-935c-5f1f367a522a
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_85004055613e-6f85-4edc-809e-e7dfab2edc69
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 8201131d2759-48e3-47e9-b0b3-51ac587b3985
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1006-x3a826d90-78f2-470d-a917-34044e50ba1f
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 111x_integrated_services_routerebcd7b45-e8ff-4741-bb68-721c91257fdb
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1100-8p_integrated_services_router200d4df7-a6d2-441b-85d5-5b6c6d7917d7
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4321/k9-ws_integrated_services_routere62b0e00-6f6d-4277-90cf-5e7dc95d9ed3
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8300-2n2s-6tb5da6a1c-a1b6-46dc-aaa8-0d8ed54f8b96
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_cg418-e5561901c-a1d4-4211-ab2b-f43c310c2d34
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4351/k9-rf_integrated_services_routerbe703974-8b65-4168-9641-ce3dab0cb52a
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1100-6g_integrated_services_router5d00a99b-3143-4611-afb1-dca41d6b515e
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4351/k9_integrated_services_routere414ac63-9465-48a7-8c2a-fbad609df1b6
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8300f76362ea-876f-4c72-8b26-899cfe534c63
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8510msr80b6beb3-ed99-450a-97c3-87a1c1473a84
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_10134dd6033d-2e70-46ee-ac38-6a02aeef930a
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1109_integrated_services_router45d600d4-4981-4ca3-b085-6be5a941660d
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 8804a948a7bd-8c00-4a36-b4e9-58d477a35b93
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4331/k9-rf_integrated_services_routerf6bbee16-ceea-4ed9-a637-9bd0171fea4f
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1100-4p_integrated_services_router11556504-8d82-4a8b-bcf3-5027396c5f10
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 8102-64h4c8f2a52-e552-4b28-9183-41de448ff444
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8540msrb5fb1774-d0e1-4465-8c7d-7db0eedaec8c
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4321/k9-rf_integrated_services_routera6fd2205-c63a-4b51-bba2-5f7b99bb2542
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1101_integrated_services_router457d1002-9a87-4f22-954e-5b7c8c00c42b
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4451-x_integrated_services_router53e09882-09d6-4391-bc6b-3122db0f34ba
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1001-hx87e4fa3c-3dd7-4125-af83-568652cae7af
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1002-x88df5188-e8f5-4082-b28a-389c30b422c4
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8000v_edgedf1b0eba-b8c2-4277-9248-32e9db827eb8
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 8808d48c156b-5803-420e-9a01-e6bf255a34df
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1004222dfab2-7afe-4b3f-960e-32085354fe6a
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4331/k9_integrated_services_routerd42fe022-b857-4ffe-aac6-4686d6b53c26
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1111x-8p_integrated_services_routerf741a8e9-26fb-4676-97e3-a10daff2c553
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4331_integrated_services_router6dd0a708-9e6b-44f6-afb1-5469acf37b01
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1001-x1611026e-a376-45cf-a8ef-8170857e40b6
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 8831b1156d98-259d-4549-824b-fb97b52f6718
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1023adba4203-4166-4898-bbca-4a3304b53438
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_100226a6d8a7-a8d1-4f17-b768-fb54ccd60bd6
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4321/k9_integrated_services_router48b5e2fb-7952-42f9-bcc4-f13a8cafc96e
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1160_integrated_services_router5399cc74-5900-4df9-8286-1c5941bd37c0
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4221_integrated_services_router89525e30-04ca-4d1f-a9f7-ba9b33b59fe5
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4451_integrated_services_router0a242dfc-e68a-47ac-b007-af1efe49f04e
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1002-x_r969ac588-170f-47c0-af11-0999921ef075
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 88180b46cf03-7ea9-48a4-838e-a10a60c24c17
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1101-4p_integrated_services_routerfa5ef0a9-361d-4896-a43f-7a0fbd3b5427
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8300-1n1s-6t3c85690b-761b-4268-8318-e1258c4b020f
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1109-2p_integrated_services_routerf1fc6713-76af-461c-945f-f9f9ce5c255e
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4431_integrated_services_router52b5cca0-95c4-4067-ba9f-246f87ee6ea0
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4000_integrated_services_routerd1a5f997-5450-4d2c-a3ad-358ed8fda1a6
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8540csr04fe85a7-3eb5-4b60-a628-e87183a90355
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1000-x4796af19-aae2-46aa-9ee2-426b2920eca0
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1109-4p_integrated_services_router6576a7ae-ce7b-4c8b-bb60-9f867c751859
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1001-x_r5cf762ec-b5cb-48c5-bf3e-a8aabe091bc7
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1002-hx045ef05a-db46-49ec-9ddf-7edaab6c8484
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8510csr1eaa6072-2eb8-4e34-abbf-e91ed0cf1347
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_cg522-e1247db0e-5732-4745-92e7-d1018e42fdc7
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_100175bb02e6-3f87-4c86-8570-e5a8870580c8
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4351_integrated_services_routerb6062efb-c058-40c6-b0d6-4f52de5f7b64
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8200bed2abb8-536e-4b9b-bf86-cd7341da03ab
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8300-1n1s-4t2x6a6f0821-d82c-449d-bb60-c4d468017acd
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 1111x_integrated_services_routerbb592253-3066-4c03-8a43-a822c028f95b
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8500-4qcbd16aaf4-3eee-4efd-bebb-306e15f5685c
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4461_integrated_services_router32522617-43f4-4c9d-9be5-b29a3646606e
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4331/k9-ws_integrated_services_router0d6f4907-0e42-4855-835d-744a70f279a0
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · catalyst_8500lb6c38584-4d8d-4f66-b407-6c0eea6b6519
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · 4351/k9-ws_integrated_services_router3c1dee86-a20b-45df-a2d5-fa03d8959602
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1002-hx_r5c859b9b-331f-447f-8e68-cd645a5b638c
has environmental constraint1 retained · stored CVE-2022-20775 → cisco · asr_1001-hx_re9e31b6d-1950-46b7-9db7-f4d44c85608c
has vulnerable target scope3 retained · stored CVE-2022-20775 → cisco · sd-wan_vedge_cloud88288e11-fffc-45b1-a297-b6d69e9582b9c244990c-5bf6-4054-8956-4b5d0a9c2334f29effca-ca73-4b38-8ee8-3ae5288c0fd5
has vulnerable target scope3 retained · stored CVE-2022-20775 → cisco · catalyst_sd-wan_managerb51205e4-6e02-47a9-9817-0747d097a685b76fed9d-c7c5-4993-9361-452ba1cce86aeeae4cd1-3f13-43a4-8c47-c4b8a1d611d9
has vulnerable target scope3 retained · stored CVE-2022-20775 → cisco · sd-wan_vsmart_controller19179c85-ceca-4def-a89e-3795f7695791bfd61e3e-a855-44ad-a85c-500dc4220841c7a3bdcd-934a-496c-9c27-d3b0897c0c1c
has vulnerable target scope3 retained · stored CVE-2022-20775 → cisco · sd-wan_vbond_orchestrator683225a9-145f-44c2-a372-293e4375f6c77941cb91-a9a6-49a9-9125-3289bb3181147dfb54f9-6b02-4ecd-9116-4cc6dc34968f
has vulnerable target scope3 retained · stored CVE-2022-20775 → cisco · sd-wan737a0e57-adb1-4cc8-93ee-d0be0d5f30d47497b465-85b9-43a0-8ef7-c29135e1501defbc52af-56bc-4757-8207-bcf337aa3802