CVE-2022-20716CWE-284

Cisco SD-WAN Solution Improper Access Control Vulnerability

High · published April 15, 2022

CVSS v3.1
7.8
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.6th percentile
Weakness
CWE-284 · Improper Access Control
Published
2022-04-15T14:15Z
EPSS history
Timeline
  • 15 APR 14:15Z
    Cisco SD-WAN Solution Improper Access Control Vulnerability
    cvelistv5