CVE-2022-20716
Cisco SD-WAN Solution Improper Access Control Vulnerability
- State
- Published
- Severity
- 7.8 High
- Published
- Apr 15, 2022
- Updated
- Nov 6, 2024
- Reserved
- Nov 2, 2021
Description
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | cisco |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Cisco SD-WAN SolutionCisco |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.