CISA KEV · catalog date Feb 25, 2026 · first observed Jul 19, 2026
Evidence dossier
CVE-2022-20775
Cisco SD-WAN Software Privilege Escalation Vulnerability
Exploited in the wild (CISA KEV since Feb 25, 2026). NVD reports CVSS 3.1 7.8. EPSS estimates 12.5% exploit likelihood as of Aug 27, 2026.
As of Aug 27, 2026
Normalized restatement
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
- State
- PUBLISHED
- Published
- Sep 30, 2022
- Updated
- Mar 2, 2026
- Evidence coverage
- 96%
Evidence chronology
What was known when
- Source dateSource date omittedFirst observed by CASCACISA-ADPOriginal evidence ↗
Record text: CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
- Source dateSource date omittedFirst observed by CASCAciscoOriginal evidence ↗
Record text: Cisco SD-WAN Software Privilege Escalation Vulnerability
Inspect raw assertion
- Field
container- Value
- Cisco SD-WAN Software Privilege Escalation Vulnerability
- Source dateSource date omittedFirst observed by CASCACVE ProgramOriginal evidence ↗
Record text: CVE Program Container
Inspect raw assertion
- Field
container- Value
- CVE Program Container
- Source dateFirst observed by CASCACISA KEVOriginal evidence ↗
Exploitation cataloged: Cisco SD-WAN Path Traversal Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Cisco SD-WAN Path Traversal Vulnerability
- Source dateFirst observed by CASCAFIRST EPSSOriginal evidence ↗
EPSS score: 12.48% probability · 95.92th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.124750000000; percentile 0.959170000000
FIRST EPSS · score date Aug 27, 2026 · 95.9th percentile · first observed Aug 27, 2026
NVD · CVSS 3.1 · first observed Jul 19, 2026 · same-version scores align in this snapshot
Evidence detail
Source limits and decisions
Why each evidence state has this value
casca-unknown-reasons-v1Eligible evidence is present for this bounded claim.
- Revision
- evidence-policy-v1.1.0
- Cutoff
- Aug 27, 2026
- Resolution
- None
Eligible evidence is present for this bounded claim.
- Revision
- evidence-policy-v1.1.0
- Cutoff
- Aug 27, 2026
- Resolution
- None
Eligible evidence is present for this bounded claim.
- Revision
- casca-direct-cvss-eligibility-v1
- Cutoff
- Aug 27, 2026
- Resolution
- None
The cited source assertion is retained while canonical product linkage remains open.
- Revision
- casca-factor-d-obligations-v1
- Cutoff
- Aug 27, 2026
- Resolution
- Resolve identity
Source comparison
Who said what
CISA ADP Vulnrichment
Inspect raw assertion
- Field
container- Value
- CISA ADP Vulnrichment
Cisco SD-WAN Software Privilege Escalation Vulnerability
Inspect raw assertion
- Field
container- Value
- Cisco SD-WAN Software Privilege Escalation Vulnerability
CVE Program Container
Inspect raw assertion
- Field
container- Value
- CVE Program Container
Cisco SD-WAN Path Traversal Vulnerability
Inspect raw assertion
- Field
observed_exploitation- Value
- Cisco SD-WAN Path Traversal Vulnerability
12.48% probability · 95.92th percentile
Inspect raw assertion
- Field
model_probability- Value
- Probability 0.124750000000; percentile 0.959170000000
Applicability
Cited product scope
Grouped from 3 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.
Identity source boundaries
- Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z
27d65b0f-b718-4b4f-bb79-c47c68d09dfa - Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z
955dae73-7302-438b-aee1-058d7cc5d48e
89 scope groups
Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "17.2.4"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "18.4.0.1"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "18.4.302"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "19.0.0"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "18.3.3.1"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "20.1.1.1"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "20.1.11"}, {"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "19.1.0a"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "17.3.1ESM1"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "17.3.1ESM2"}, {"status": "affected", "version": "17.2.1LA"}, {"status": "affected", "version": "20.1.2"}, {"status": "affected", "version": "17.3.1ESM3"}, {"status": "affected", "version": "19.2.929"}, {"status": "affected", "version": "19.2.31"}, {"status": "affected", "version": "20.3.2"}, {"status": "affected", "version": "19.2.32"}, {"status": "affected", "version": "17.3.2ESM1"}, {"status": "affected", "version": "20.3.2.1"}, {"status": "affected", "version": "18.4.6"}, {"status": "affected", "version": "20.4.1"}, {"status": "affected", "version": "17.3.2ESM2"}, {"status": "affected", "version": "19.2.4"}, {"status": "affected", "version": "20.4.1.1"}, {"status": "affected", "version": "20.3.3"}, {"status": "affected", "version": "20.3.809"}, {"status": "affected", "version": "20.3.3.1"}, {"status": "affected", "version": "20.5.1"}, {"status": "affected", "version": "20.3.811"}, {"status": "affected", "version": "20.1.3"}, {"status": "affected", "version": "20.4.1.2"}, {"status": "affected", "version": "17.4.2.2527"}, {"status": "affected", "version": "17.4.2ES1"}, {"status": "affected", "version": "17.3.2ESM3"}, {"status": "affected", "version": "20.4.2"}, {"status": "affected", "version": "20.3.4"}, {"status": "affected", "version": "20.6.1"}, {"status": "affected", "version": "20.6.1.1"}, {"status": "affected", "version": "20.6.2"}, {"status": "affected", "version": "20.7.1"}, {"status": "affected", "version": "20.4.2.1"}, {"status": "affected", "version": "20.3.4.1"}, {"status": "affected", "version": "20.5.1.1"}, {"status": "affected", "version": "20.6.2.1"}, {"status": "affected", "version": "20.3.4.2"}, {"status": "affected", "version": "20.4.2.2"}, {"status": "affected", "version": "20.6.2.2"}, {"status": "affected", "version": "20.5.1.2"}, {"status": "affected", "version": "20.7.1.1"}, {"status": "affected", "version": "20.3.5"}, {"status": "affected", "version": "20.6.3"}, {"status": "affected", "version": "20.7.2"}, {"status": "affected", "version": "20.6.3.1"}, {"status": "affected", "version": "20.6.4"}, {"status": "affected", "version": "20.3.6"}, {"status": "affected", "version": "20.6.5"}, {"status": "affected", "version": "20.3.7"}, {"status": "affected", "version": "20.6.5.1"}, {"status": "affected", "version": "20.6.4.1"}, {"status": "affected", "version": "20.6.3.2"}, {"status": "affected", "version": "20.4.2.3"}, {"status": "affected", "version": "20.6.1.2"}, {"status": "affected", "version": "20.3.4.3"}, {"status": "affected", "version": "20.6.5.2"}, {"status": "affected", "version": "20.3.3.2"}, {"status": "affected", "version": "20.3.7.1"}, {"status": "affected", "version": "20.3.5.1"}, {"status": "affected", "version": "20.1.3.1"}, {"status": "affected", "version": "20.6.5.3"}, {"status": "affected", "version": "20.6.3.3"}, {"status": "affected", "version": "20.3.7.2"}, {"status": "affected", "version": "20.6.5.4"}, {"status": "affected", "version": "20.6.4.2"}, {"status": "affected", "version": "20.6.5.5"}, {"status": "affected", "version": "20.6.3.4"}, {"status": "affected", "version": "20.3.8"}, {"status": "affected", "version": "20.6.6"}, {"status": "affected", "version": "20.6.7"}, {"status": "affected", "version": "20.6.8"}]Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "20.1.1.1"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "19.0.0"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "18.4.302"}, {"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "18.3.6.1"}, {"status": "affected", "version": "19.0.1a"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "18.3.3.1"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "18.3.1.1"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "18.4.0.1"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "17.2.4"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "18.4.501_ES"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "20.1.2"}, {"status": "affected", "version": "19.2.929"}, {"status": "affected", "version": "19.2.31"}, {"status": "affected", "version": "20.3.2"}, {"status": "affected", "version": "19.2.32"}, {"status": "affected", "version": "20.3.2_925"}, {"status": "affected", "version": "20.3.2.1"}, {"status": "affected", "version": "20.3.2.1_927"}, {"status": "affected", "version": "18.4.6"}, {"status": "affected", "version": "20.1.2_937"}, {"status": "affected", "version": "20.4.1"}, {"status": "affected", "version": "20.3.2_928"}, {"status": "affected", "version": "20.3.2_929"}, {"status": "affected", "version": "20.4.1.0.1"}, {"status": "affected", "version": "20.3.2.1_930"}, {"status": "affected", "version": "19.2.4"}, {"status": "affected", "version": "20.5.0.1.1"}, {"status": "affected", "version": "20.4.1.1"}, {"status": "affected", "version": "20.3.3"}, {"status": "affected", "version": "19.2.4.0.1"}, {"status": "affected", "version": "20.3.2_937"}, {"status": "affected", "version": "20.3.3.1"}, {"status": "affected", "version": "20.5.1"}, {"status": "affected", "version": "20.1.3"}, {"status": "affected", "version": "20.3.3.0.4"}, {"status": "affected", "version": "20.3.3.1.2"}, {"status": "affected", "version": "20.3.3.1.1"}, {"status": "affected", "version": "20.4.1.2"}, {"status": "affected", "version": "20.3.3.0.2"}, {"status": "affected", "version": "20.4.1.1.5"}, {"status": "affected", "version": "20.4.1.0.01"}, {"status": "affected", "version": "20.4.1.0.02"}, {"status": "affected", "version": "20.3.3.1.7"}, {"status": "affected", "version": "20.3.3.1.5"}, {"status": "affected", "version": "20.5.1.0.1"}, {"status": "affected", "version": "20.3.3.1.10"}, {"status": "affected", "version": "20.3.3.0.8"}, {"status": "affected", "version": "20.4.2"}, {"status": "affected", "version": "20.4.2.0.1"}, {"status": "affected", "version": "20.3.4"}, {"status": "affected", "version": "20.3.3.0.14"}, {"status": "affected", "version": "19.2.4.0.8"}, {"status": "affected", "version": "19.2.4.0.9"}, {"status": "affected", "version": "20.3.4.0.1"}, {"status": "affected", "version": "20.3.2.0.5"}, {"status": "affected", "version": "20.6.1"}, {"status": "affected", "version": "20.5.1.0.2"}, {"status": "affected", "version": "20.3.3.0.17"}, {"status": "affected", "version": "20.6.1.1"}, {"status": "affected", "version": "20.6.0.18.3"}, {"status": "affected", "version": "20.3.2.0.6"}, {"status": "affected", "version": "20.6.0.18.4"}, {"status": "affected", "version": "20.4.2.0.2"}, {"status": "affected", "version": "20.3.3.0.16"}, {"status": "affected", "version": "20.3.4.0.5"}, {"status": "affected", "version": "20.6.1.0.1"}, {"status": "affected", "version": "20.3.4.0.6"}, {"status": "affected", "version": "20.6.2"}, {"status": "affected", "version": "20.7.1EFT2"}, {"status": "affected", "version": "20.3.4.0.9"}, {"status": "affected", "version": "20.3.4.0.11"}, {"status": "affected", "version": "20.4.2.0.4"}, {"status": "affected", "version": "20.3.3.0.18"}, {"status": "affected", "version": "20.7.1"}, {"status": "affected", "version": "20.6.2.1"}, {"status": "affected", "version": "20.3.4.1"}, {"status": "affected", "version": "20.5.1.1"}, {"status": "affected", "version": "20.4.2.1"}, {"status": "affected", "version": "20.4.2.1.1"}, {"status": "affected", "version": "20.3.4.1.1"}, {"status": "affected", "version": "20.3.813"}, {"status": "affected", "version": "20.3.4.0.19"}, {"status": "affected", "version": "20.4.2.2.1"}, {"status": "affected", "version": "20.5.1.2"}, {"status": "affected", "version": "20.3.4.2"}, {"status": "affected", "version": "20.3.814"}, {"status": "affected", "version": "20.4.2.2"}, {"status": "affected", "version": "20.6.2.2"}, {"status": "affected", "version": "20.3.4.2.1"}, {"status": "affected", "version": "20.7.1.1"}, {"status": "affected", "version": "20.3.4.1.2"}, {"status": "affected", "version": "20.6.2.2.2"}, {"status": "affected", "version": "20.3.4.0.20"}, {"status": "affected", "version": "20.6.2.2.3"}, {"status": "affected", "version": "20.4.2.2.2"}, {"status": "affected", "version": "20.3.5"}, {"status": "affected", "version": "20.6.2.0.4"}, {"status": "affected", "version": "20.4.2.2.3"}, {"status": "affected", "version": "20.3.4.0.24"}, {"status": "affected", "version": "20.6.2.2.7"}, {"status": "affected", "version": "20.6.3"}, {"status": "affected", "version": "20.3.4.2.2"}, {"status": "affected", "version": "20.4.2.2.4"}, {"status": "affected", "version": "20.7.1.0.2"}, {"status": "affected", "version": "20.3.5.0.8"}, {"status": "affected", "version": "20.3.5.0.9"}, {"status": "affected", "version": "20.3.5.0.7"}, {"status": "affected", "version": "20.3.6"}, {"status": "affected", "version": "20.3.7"}, {"status": "affected", "version": "20.3.5.1"}, {"status": "affected", "version": "20.3.4.3"}, {"status": "affected", "version": "20.3.3.2"}, {"status": "affected", "version": "20.3.7.1"}, {"status": "affected", "version": "20.3.4.0.25"}, {"status": "affected", "version": "20.6.2.2.4"}, {"status": "affected", "version": "20.6.1.2"}, {"status": "affected", "version": "20.3.4.0.26"}, {"status": "affected", "version": "20.3.7.2"}, {"status": "affected", "version": "20.3.8"}]Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "18.4.302"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "17.2.4"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "20.1.2"}]Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "18.4.302"}, {"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "19.0.1a"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "17.2.4"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "20.1.2"}, {"status": "affected", "version": "19.2.929"}, {"status": "affected", "version": "19.2.31"}, {"status": "affected", "version": "20.3.2"}, {"status": "affected", "version": "19.2.32"}, {"status": "affected", "version": "18.4.6"}, {"status": "affected", "version": "20.4.1"}, {"status": "affected", "version": "19.2.4"}, {"status": "affected", "version": "20.4.1.1"}, {"status": "affected", "version": "20.3.3"}, {"status": "affected", "version": "20.5.1"}, {"status": "affected", "version": "20.1.3"}, {"status": "affected", "version": "20.4.1.2"}, {"status": "affected", "version": "20.4.2"}, {"status": "affected", "version": "20.3.4"}, {"status": "affected", "version": "20.6.1"}, {"status": "affected", "version": "20.6.2"}, {"status": "affected", "version": "20.7.1"}, {"status": "affected", "version": "20.3.5"}, {"status": "affected", "version": "20.6.3"}, {"status": "affected", "version": "20.7.2"}, {"status": "affected", "version": "20.6.4"}, {"status": "affected", "version": "20.3.6"}, {"status": "affected", "version": "20.6.5"}, {"status": "affected", "version": "20.3.7"}, {"status": "affected", "version": "20.4.2.3"}, {"status": "affected", "version": "20.3.4.3"}, {"status": "affected", "version": "20.6.4.1"}, {"status": "affected", "version": "20.6.3.2"}, {"status": "affected", "version": "20.3.5.1"}, {"status": "affected", "version": "20.6.5.2"}, {"status": "affected", "version": "20.3.7.1"}, {"status": "affected", "version": "20.3.3.2"}, {"status": "affected", "version": "20.6.1.2"}, {"status": "affected", "version": "20.1.3.1"}, {"status": "affected", "version": "20.6.5.3"}, {"status": "affected", "version": "20.6.3.3"}, {"status": "affected", "version": "20.3.7.2"}, {"status": "affected", "version": "20.6.5.4"}, {"status": "affected", "version": "20.3.8"}, {"status": "affected", "version": "20.6.6"}, {"status": "affected", "version": "20.6.7"}, {"status": "affected", "version": "20.6.8"}]Canonical linkage remains open; the cited source assertion is retained below.
Inspect raw assertion
[{"status": "affected", "version": "18.4.303"}, {"status": "affected", "version": "18.3.7"}, {"status": "affected", "version": "19.3.0"}, {"status": "affected", "version": "18.2.0"}, {"status": "affected", "version": "20.1.12"}, {"status": "affected", "version": "19.2.099"}, {"status": "affected", "version": "17.2.10"}, {"status": "affected", "version": "18.3.3"}, {"status": "affected", "version": "18.3.6"}, {"status": "affected", "version": "19.0.0"}, {"status": "affected", "version": "17.2.6"}, {"status": "affected", "version": "18.4.0"}, {"status": "affected", "version": "19.1.01"}, {"status": "affected", "version": "19.2.098"}, {"status": "affected", "version": "18.3.1"}, {"status": "affected", "version": "18.4.302"}, {"status": "affected", "version": "19.2.2"}, {"status": "affected", "version": "18.3.5"}, {"status": "affected", "version": "17.2.9"}, {"status": "affected", "version": "19.1.0"}, {"status": "affected", "version": "20.1.11"}, {"status": "affected", "version": "19.2.097"}, {"status": "affected", "version": "18.4.5"}, {"status": "affected", "version": "17.2.5"}, {"status": "affected", "version": "17.2.8"}, {"status": "affected", "version": "18.3.8"}, {"status": "affected", "version": "18.3.0"}, {"status": "affected", "version": "18.4.3"}, {"status": "affected", "version": "18.4.4"}, {"status": "affected", "version": "19.2.1"}, {"status": "affected", "version": "17.2.4"}, {"status": "affected", "version": "18.3.4"}, {"status": "affected", "version": "19.0.1a"}, {"status": "affected", "version": "20.1.1"}, {"status": "affected", "version": "17.2.7"}, {"status": "affected", "version": "18.4.1"}, {"status": "affected", "version": "19.2.0"}, {"status": "affected", "version": "19.2.3"}, {"status": "affected", "version": "20.3.1"}, {"status": "affected", "version": "20.1.2"}, {"status": "affected", "version": "19.2.929"}, {"status": "affected", "version": "19.2.31"}, {"status": "affected", "version": "20.3.2"}, {"status": "affected", "version": "19.2.32"}, {"status": "affected", "version": "18.4.6"}, {"status": "affected", "version": "20.4.1"}, {"status": "affected", "version": "19.2.4"}, {"status": "affected", "version": "20.4.1.1"}, {"status": "affected", "version": "20.3.3"}, {"status": "affected", "version": "20.5.1"}, {"status": "affected", "version": "20.1.3"}, {"status": "affected", "version": "20.4.1.2"}, {"status": "affected", "version": "20.4.2"}, {"status": "affected", "version": "20.3.4"}, {"status": "affected", "version": "20.6.1"}, {"status": "affected", "version": "20.6.2"}, {"status": "affected", "version": "20.7.1"}, {"status": "affected", "version": "20.7.1.2"}, {"status": "affected", "version": "20.3.5"}, {"status": "affected", "version": "20.6.3"}, {"status": "affected", "version": "20.7.2"}, {"status": "affected", "version": "20.6.4"}, {"status": "affected", "version": "20.3.6"}, {"status": "affected", "version": "20.6.5"}, {"status": "affected", "version": "20.3.7"}, {"status": "affected", "version": "20.6.5.1"}, {"status": "affected", "version": "20.3.3.2"}, {"status": "affected", "version": "20.6.4.1"}, {"status": "affected", "version": "20.6.3.2"}, {"status": "affected", "version": "20.3.4.3"}, {"status": "affected", "version": "20.6.5.2"}, {"status": "affected", "version": "20.3.7.1"}, {"status": "affected", "version": "20.3.5.1"}, {"status": "affected", "version": "20.6.1.2"}, {"status": "affected", "version": "20.6.5.3"}, {"status": "affected", "version": "20.6.3.3"}, {"status": "affected", "version": "20.3.7.2"}, {"status": "affected", "version": "20.6.5.4"}, {"status": "affected", "version": "20.3.8"}, {"status": "affected", "version": "20.6.6"}, {"status": "affected", "version": "20.6.7"}, {"status": "affected", "version": "20.6.8"}]product-0885dd02cc9452d4f4041009f4e89e39aa9cb7b3a2241eb0568d5272a45ba686Linked exactInspect raw assertion
cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 3
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0f77cd6a-83da-4f31-a128-ad6daecd623b
product-61bd7c4a997f0057522432fc32977f3bee0e3ca7f1e9b52a1c315fc5b0c94b82Linked exactInspect raw assertion
cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 4
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a2d2305b-b69e-4f74-a44e-07b3205ce9f7
product-48496322b8049136b306dd98a470fd79e435e1ed18fde6815354449b60512192Linked exactInspect raw assertion
cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 5
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
2b68b363-3c57-4e95-8b13-0f9b59d551f7
product-397442e23e2a34298ff5a325e65f923a74b06f578053f14f452c10a8f3897e60Linked exactInspect raw assertion
cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 6
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
26dd41b3-1d1d-44d3-ba8e-5a66afee77e6
product-e5fb7db7e3021671cae1c5fbc328d90008a6d7f3443554172e2f56006322542aLinked exactInspect raw assertion
cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 7
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
1952b64c-4ae0-4ccb-86c5-8d1ff6a12822
product-9fda7bc5de4a65dc7bb0a3527f9fe8dac39b87fcc5d0d9c845d90d07d056b28cLinked exactInspect raw assertion
cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 8
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5aad4397-6dcf-493a-bd61-3a890f6f3ab2
product-6d06967d013c5208818969e6a3f9fd97997fde602c3de99ee5dc56b6b58da475Linked exactInspect raw assertion
cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 9
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
5eb8a757-7888-4ac2-be44-b89db83c6c77
product-a320671625d66c0f5e525c6800954b21a7539790b5f2cdeaeeac5a18b6e41881Linked exactInspect raw assertion
cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 10
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
3f2f0a8e-97f6-41ac-be67-4b2d60f9d36b
product-ba8c68f373165e04bc790264843055a058f32acb0a6b010ab8d817e41f45eb16Linked exactInspect raw assertion
cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 11
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
bb9229f3-7bce-46c4-9879-d57b5baae44e
product-5acf21099ac27170d3dbdecffd55c65a94fea428b95bebfe590ab4648c76a62bLinked exactInspect raw assertion
cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 12
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
b80890a8-e3d3-462c-b125-9e9bc6525b02
product-796a0d294e7bc7b82cb47666d5ac1c3619298798ea161b8312b14c57aa25d183Linked exactInspect raw assertion
cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 13
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
a5a606fe-e6f1-43f9-b1cd-d9df35fc3573
product-d92e68f54c6af83a9a713f685ae040d64338dfd1854b167b47da281717d69c4fLinked exactInspect raw assertion
cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 14
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
0547e196-5991-4c33-823a-342542e9dfd3
product-2eb85d470eea33297206ee077ee1a7ebe94b8bbfb1e21f3a9be41146e5df9c02Linked exactInspect raw assertion
cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 15
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
802cbfc1-8a2f-4bf7-a1d3-00622c33be16
product-eff07dedb7ca14479c13542287b11082c9f6a3c96014bae8d278ab140d05e778Linked exactInspect raw assertion
cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 16
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
7afe0fc1-eebc-42f0-88b0-4af5b76ddd97
product-e3a1fbf4a9275ee1dfcf01b86353961bb6466ca0c2890cd84432fe24ed94f8e2Linked exactInspect raw assertion
cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 17
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
f3f374dc-b9f7-4515-a064-01bb436ca984
product-86e902040c8bc39f6147c90be698b668a9c258a6ef01c1b325aab7cf716bb8d0Linked exactInspect raw assertion
cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 18
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
d916389f-54db-44cb-91dd-7ce3c7059350
product-ac941ee03e9a60a527b8b89ae04f3e6713a44047930714512fe84fdf58ef8287Linked exactInspect raw assertion
cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 19
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
ce82335e-ecec-47bd-bc4a-5fdea08d1a18
product-870dbdddddd490980ccebdfccae95f0e0b83927421991678f0e2787a21ec6fefLinked exactInspect raw assertion
cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 20
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
6c8aed7c-dda3-4c29-bb95-6518c02c551a
product-0ba2a993425c641e4c34302d679df853efcb7cb683154f3730e2fe3ed04586e6Linked exactInspect raw assertion
cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 24
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
9421dbef-ae42-4234-b49f-fcc34b804d7f
product-832381cb82d2fe583df4cc5d00dc873a893532ccf806a9fc1512555baef73a21Linked exactInspect raw assertion
cpe:2.3:h:cisco:4321\/k9_integrated_services_router:-:*:*:*:*:*:*:*- Official link
- Linked exact
- Role
- Environmental constraint
- Configuration
- 1 · node/1 · match 23
- Logic
- OR
- Version bounds
- No explicit bounds
- Match ID
86049773-c88d-4a26-a0d3-d40f3c312aec
Affected-product evidence
Accepted scope and product mapping
5 canonical links · 1 source-reported links
vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-5c9d7c07c7c8450df4405419cab18e4d5be77ae0f8eecb54c514593d2ae8d529
- Source class
- Nvd cpe vulnerable target
- Assertions
- 3
- Mapping revision
- cpe23-exact-mapping-v1
- Observed cutoff
- Aug 27, 2026
Retained assertion IDs
88288e11-fffc-45b1-a297-b6d69e9582b9c244990c-5bf6-4054-8956-4b5d0a9c2334f29effca-ca73-4b38-8ee8-3ae5288c0fd5vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-7d14d24908e295d99b26952868bcdd8b679a703f05b4aac134d1f85c620f6f52
- Source class
- Nvd cpe vulnerable target
- Assertions
- 3
- Mapping revision
- cpe23-exact-mapping-v1
- Observed cutoff
- Aug 27, 2026
Retained assertion IDs
b51205e4-6e02-47a9-9817-0747d097a685b76fed9d-c7c5-4993-9361-452ba1cce86aeeae4cd1-3f13-43a4-8c47-c4b8a1d611d9vendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-93425b32f8b59a37b2b15ffd9112df06c7de54c9717d64f294043cca46c8bd91
- Source class
- Nvd cpe vulnerable target
- Assertions
- 3
- Mapping revision
- cpe23-exact-mapping-v1
- Observed cutoff
- Aug 27, 2026
Retained assertion IDs
19179c85-ceca-4def-a89e-3795f7695791bfd61e3e-a855-44ad-a85c-500dc4220841c7a3bdcd-934a-496c-9c27-d3b0897c0c1cvendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-d025f55494714adadb54d08c869a60d77d44e2e7cb5a80d35a3a7b482e4cfb78
- Source class
- Nvd cpe vulnerable target
- Assertions
- 3
- Mapping revision
- cpe23-exact-mapping-v1
- Observed cutoff
- Aug 27, 2026
Retained assertion IDs
683225a9-145f-44c2-a372-293e4375f6c77941cb91-a9a6-49a9-9125-3289bb3181147dfb54f9-6b02-4ecd-9116-4cc6dc34968fvendor-0774b265c0e837e737aaf99ed0f2450c048e61f34267ca59d8623878b839334e · product-d21b0c3e9c0fdd76767c66f74ec3c11367f76a620cc80bee504d32f2a6e7448b
- Source class
- Nvd cpe vulnerable target
- Assertions
- 3
- Mapping revision
- cpe23-exact-mapping-v1
- Observed cutoff
- Aug 27, 2026
Retained assertion IDs
737a0e57-adb1-4cc8-93ee-d0be0d5f30d47497b465-85b9-43a0-8ef7-c29135e1501defbc52af-56bc-4757-8207-bcf337aa3802Canonical linkage remains open; the cited source assertion is retained below.
Vendor specified only by source · Product specified only by source
- Source class
- Direct cve affected
- Assertions
- 5
- Mapping revision
- cpe23-exact-mapping-v1
- Observed cutoff
- Aug 27, 2026
Retained assertion IDs
2b572e4e-16ae-4f56-be62-6266046bb09c3b93316d-dc2b-416d-80f8-a8f0cc6a99b56256236d-1c4c-469b-a85f-723fd611e588b5898dba-ddff-42ca-a257-c773190c996adb33cc43-35bc-4249-9124-77eaadb24ee5Assessments
CVSS by origin
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HDirect CVE/CNA normalized decisions
cisco
CVSS 3.1 · Primary · Original assertion · rank 1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H- Validation
- Valid match
- Recomputed
- 7.8
- Decision reason
- Evidence supported
- Policy
- casca-direct-cvss-eligibility-v1
Assessments are retained side by side under closed precedence. Cascade never averages CVSS.
Evidence boundaries
- KEV membership is authoritative for the catalog, not proof of exposure in any environment.
- EPSS is a dated model probability and not an individual-environment prediction.
- Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
- NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
- Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
- NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
- Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
- OSV aggregation and OSV-converted NVD material are not independent corroboration.
- Red Hat facts are vendor assertions for the exact supplied products.
- Nonmembership and not-yet-observed states are not proof of safety.