7.8
CVSSv3

CVE-2022-20716

Published: 15/04/2022 Updated: 07/11/2023
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 642
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local malicious user to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco sd-wan vbond orchestrator -

cisco sd-wan vedge router -

cisco sd-wan solution -

cisco sd-wan vedge cloud -

cisco sd-wan vsmart controller software -

cisco catalyst sd-wan manager -

cisco sd-wan

Vendor Advisories

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges This vulnerability is due to improper access control on files within the affected system A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device If successful, the attacker c ...