PT-2022-6015 · Cisco · Cisco Sd-Wan Vedge Routers+5

Cyrille Chatras · Published 2022-09-28 · Updated 2026-04-03 · CVE-2022-20775

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco SD-WAN Software (affected versions not specified) Cisco SD-WAN vBond Orchestrator Cisco SD-WAN vEdge Cloud Routers Cisco SD-WAN vEdge Routers Cisco SD-WAN vSmart Controller Cisco SD-WAN vManage

Description A flaw exists in the Command Line Interface (CLI) of Cisco SD-WAN Software that could allow an authenticated, local attacker to gain elevated privileges. This is due to insufficient access controls on commands within the application CLI. An attacker could exploit this by executing a malicious command on the CLI, potentially allowing them to execute arbitrary commands as the root user. The vulnerability involves incorrect restriction of the path name to an access-restricted directory.

Recommendations Update to a newer version of Cisco SD-WAN Software that addresses this vulnerability.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-25

CWE-22

Related Identifiers

BDU:2022-07466

CVE-2022-20775

GHSA-WMJV-552V-PXJC

Affected Products

Cisco Sd-Wan

Cisco Sd-Wan Vbond Orchestrator

Cisco Sd-Wan Vedge Cloud Routers

Cisco Sd-Wan Vedge Routers

Cisco Sd-Wan Vmanage

Cisco Sd-Wan Vsmart Controller

References · 58

• 🔥 https://github.com/orangecertcc/security-research/security/advisories/GHSA-wmjv-552v-pxjc · Exploit
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20775 · Security Note
• https://bdu.fstec.ru/vul/2022-07466 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20775 · Vendor Advisory
• https://twitter.com/threatcluster/status/2026847358344962200 · Twitter Post
• https://twitter.com/CISACyber/status/2026701341683335608 · Twitter Post
• https://twitter.com/ThreatSynop/status/2026847263855882577 · Twitter Post
• https://t.me/cibsecurity/50810 · Telegram Post
• https://t.me/aptreports/26317 · Telegram Post
• https://patchintel.substack.com/p/patchintel-issue-1-week-of-march?r=7v8ayn · Reddit Post
• https://twitter.com/ThreatSynop/status/2026725075118903637 · Twitter Post
• https://reddit.com/r/sysadmin/comments/1rf7dzv/cisco_sdwan_zeroday_exploited_since_2023 · Reddit Post
• https://twitter.com/arnavsharma/status/2026804015065887043 · Twitter Post