CVE-2022-20775

Cisco SD-WAN Software Privilege Escalation Vulnerability

State: Published
Severity: 7.8 High
Published: Sep 30, 2022
Updated: Mar 2, 2026
Reserved: Nov 2, 2021

Description

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges.

This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	cisco

Weaknesses

CWE-25 Path Traversal: '/../filedir'

Affected Products

Product	Versions
Cisco Catalyst SD-WANCisco	18.3.1Affected 19.2.1Affected 17.2.4Affected 19.3.0Affected 18.3.0Affected 18.3.4Affected 18.4.303Affected 18.4.0.1Affected 17.2.9Affected 18.3.7Affected 18.2.0Affected 17.2.10Affected 18.4.5Affected 18.4.0Affected 17.2.5Affected 18.3.8Affected 18.4.4Affected 18.4.302Affected 17.2.7Affected 19.2.098Affected 20.1.1Affected 19.2.099Affected 18.3.3Affected 18.4.1Affected 17.2.8Affected and 87 more versions
Cisco Catalyst SD-WAN ManagerCisco	20.1.12Affected 19.2.1Affected 18.4.4Affected 18.4.5Affected 20.1.1.1Affected 20.1.1Affected 19.3.0Affected 19.2.2Affected 19.2.099Affected 18.3.6Affected 18.3.7Affected 19.2.0Affected 18.3.8Affected 19.0.0Affected 19.1.0Affected 18.4.302Affected 18.4.303Affected 19.2.097Affected 19.2.098Affected 17.2.10Affected 18.3.6.1Affected 19.0.1aAffected 18.2.0Affected 18.4.3Affected 18.4.1Affected and 127 more versions
Cisco SD-WAN vContainerCisco	18.4.5Affected 20.1.12Affected 18.3.6Affected 19.2.1Affected 19.3.0Affected 20.1.1Affected 19.2.2Affected 18.3.8Affected 18.4.3Affected 18.4.4Affected 18.4.302Affected 19.1.0Affected 18.4.303Affected 19.2.0Affected 19.2.098Affected 17.2.10Affected 18.3.7Affected 18.3.1Affected 19.2.099Affected 19.2.097Affected 18.3.4Affected 18.2.0Affected 18.3.5Affected 18.4.1Affected 17.2.5Affected and 11 more versions
Cisco SD-WAN vEdge CloudCisco	19.2.1Affected 20.1.12Affected 18.4.4Affected 19.3.0Affected 18.3.8Affected 19.2.2Affected 20.1.1Affected 18.3.6Affected 18.4.3Affected 18.4.302Affected 18.4.5Affected 18.4.303Affected 19.2.098Affected 19.1.0Affected 17.2.10Affected 19.0.1aAffected 19.2.099Affected 18.3.7Affected 19.2.097Affected 18.3.1Affected 19.2.0Affected 17.2.9Affected 18.3.4Affected 18.2.0Affected 18.4.1Affected and 54 more versions
Cisco SD-WAN vEdge RouterCisco	18.4.303Affected 18.3.7Affected 19.3.0Affected 18.2.0Affected 20.1.12Affected 19.2.099Affected 17.2.10Affected 18.3.3Affected 18.3.6Affected 19.0.0Affected 17.2.6Affected 18.4.0Affected 19.1.01Affected 19.2.098Affected 18.3.1Affected 18.4.302Affected 19.2.2Affected 18.3.5Affected 17.2.9Affected 19.1.0Affected 20.1.11Affected 19.2.097Affected 18.4.5Affected 17.2.5Affected 17.2.8Affected and 57 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.