cisco-sa-sd-wan-priv-E6e8tEdF: Cisco SD-WAN Software Privilege Escalation Vulnerabilities
First published: Wed Sep 28 2022(Updated: )
Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
Credit: Cyrille Chatras Orange GroupOrange CERT-CC for reporting CVE-2022-20775. Matei "Mal" Badanoiu Deloitte Romania for reporting CVE
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco SD-WAN Solution | =20.8<20.8.1=20.7<20.7.2>=18.4 and earlier=19.2=20.3<=20.6<20.6.3 | 20.8.1 20.7.2 20.6.3 |
| Cisco SD-WAN Solution |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sd-wan-priv-E6e8tEdF?
The vulnerability cisco-sa-sd-wan-priv-E6e8tEdF is rated as critical due to its potential for allowing unauthorized privilege escalation.
How do I fix cisco-sa-sd-wan-priv-E6e8tEdF?
To fix cisco-sa-sd-wan-priv-E6e8tEdF, upgrade to the latest recommended version of Cisco SD-WAN Software as specified in the advisory.
Who is affected by cisco-sa-sd-wan-priv-E6e8tEdF?
Cisco SD-WAN Software versions up to 20.8.1, 20.7.2, and 20.6.3 are affected by cisco-sa-sd-wan-priv-E6e8tEdF.
What causes cisco-sa-sd-wan-priv-E6e8tEdF?
cisco-sa-sd-wan-priv-E6e8tEdF is caused by improper access controls on commands within the application CLI, allowing local authenticated attackers to exploit these vulnerabilities.
Can cisco-sa-sd-wan-priv-E6e8tEdF be exploited remotely?
No, cisco-sa-sd-wan-priv-E6e8tEdF requires local access for exploitation, as the vulnerabilities are only accessible to authenticated users.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/title
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- vendor/cisco
- canonical/cisco sd-wan solution
- version/cisco sd-wan solution/20.8
- version/cisco sd-wan solution/20.7
- version/cisco sd-wan solution/18.4 and earlier
- version/cisco sd-wan solution/19.2
- version/cisco sd-wan solution/20.3
- version/cisco sd-wan solution/20.6