CVE-2022-20818CWE-25

Cisco SD-WAN Software Privilege Escalation Vulnerabilities

High · published September 30, 2022

CVSS v3.1
7.8
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00633 · 49.7th percentile
Weakness
CWE-25 · Path Traversal: '/../filedir'
Published
2022-09-30T18:45Z
EPSS history
Timeline
  • 30 SEP 18:45Z
    Cisco SD-WAN Software Privilege Escalation Vulnerabilities
    cvelistv5