← Database

CVE-2022-20818

HIGH CVSS: 7.8 Published: 2022-09-30 Modified: 2026-06-17

Description

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

Affected Platforms

Cisco 1100-8P Integrated Services RouterCisco 4321\/K9-Ws Integrated Services RouterCisco 1101 Integrated Services RouterCisco Asr 1006Cisco Catalyst 8500Cisco Catalyst Cg418-ECisco Asr 1004Cisco 1111X Integrated Services RouterCisco Catalyst 8300Cisco 4431 Integrated Services Router

Weakness Type

CWE-25, CWE-22

References