PT-2022-2714 · Cisco · Cisco Sd-Wan Vmanage

Andrew Kim · Published 2022-04-13 · Updated 2023-10-16 · CVE-2022-20739

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN vManage Software (affected versions not specified)

Description A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected system as a low-privileged user to exploit this vulnerability. This vulnerability exists because a file leveraged by a root user is executed when a low-privileged user runs specific commands on an affected system. An attacker could exploit this vulnerability by injecting arbitrary commands to a specific file as a lower-privileged user and then waiting until an admin user executes specific commands. The commands would then be executed on the device by the root user. A successful exploit could allow the attacker to escalate their privileges on the affected system from a low-privileged user to the root user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

BDU:2022-03212

CVE-2022-20739

Affected Products

Cisco Sd-Wan Vmanage

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-20739 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-vman-tEJFpBSL · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20739 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03212 · Security Note
• https://t.me/cibsecurity/40852 · Telegram Post
• https://t.me/cvenotify/59522 · Telegram Post