CVE-2022-20739: Cisco SD-WAN vManage Software Privilege Escalation Vulnerability
First published: Fri Apr 15 2022(Updated: )
A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected system as a low-privileged user to exploit this vulnerability. This vulnerability exists because a file leveraged by a root user is executed when a low-privileged user runs specific commands on an affected system. An attacker could exploit this vulnerability by injecting arbitrary commands to a specific file as a lower-privileged user and then waiting until an admin user executes specific commands. The commands would then be executed on the device by the root user. A successful exploit could allow the attacker to escalate their privileges on the affected system from a low-privileged user to the root user.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Catalyst SD-WAN Manager | =20.7 | |
| Cisco SD-WAN vManage | <20.6.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-20739?
CVE-2022-20739 is a vulnerability in the CLI of Cisco SD-WAN vManage Software that allows an authenticated, local attacker to execute arbitrary commands as the root user.
How severe is CVE-2022-20739?
CVE-2022-20739 has a severity rating of 7.3, which is considered high.
How can an attacker exploit CVE-2022-20739?
An attacker must be authenticated as a low-privileged user on the affected system to exploit CVE-2022-20739.
Which software versions are affected by CVE-2022-20739?
Cisco Catalyst SD-WAN Manager version 20.7 and Cisco SD-WAN vManage versions up to exclusive 20.6.1 are affected by CVE-2022-20739.
Where can I find more information about CVE-2022-20739?
You can find more information about CVE-2022-20739 in the Cisco Security Advisory at the following link: [Cisco Security Advisory - CVE-2022-20739](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-vman-tEJFpBSL).
- collector/nvd-api
- collector/nvd-index
- agent/type
- agent/author
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/title
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco catalyst sd-wan manager
- version/cisco catalyst sd-wan manager/20.7
- canonical/cisco sd-wan vmanage