CVEvulnerability

CVE-2022-20716

7.8 HIGH Published 2022-04-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-284

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.

Affected configurations

• cisco catalyst sd-wan manager • cisco sd-wan solution • cisco sd-wan vbond orchestrator • cisco sd-wan vedge cloud • cisco sd-wan vedge router • cisco sd-wan vsmart controller software • cisco sd-wan (>= 18.4 < 20.6.1) • cisco sd-wan (>= 20.7 < 20.7.1)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References