Product:
Cisco SD-WAN Software
Summary
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2022-20775 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the Cisco SD-WAN Software and be authenticated. The attacker can execute a specially crafted command in the application CLI, which could lead to the execution of arbitrary commands with root privileges. This could allow the attacker to manipulate the system and access sensitive information.
Affected Products
- Cisco SD-WAN Software: Vulnerable due to improper access controls on CLI commands.
Mitigation
To mitigate this vulnerability, it is recommended to follow CISA’s guidelines for assessing exposure and risks associated with Cisco SD-WAN devices. Adhere to CISA’s Emergency Directive 26-03 and the Hunt & Hardening Guidance for Cisco SD-WAN Devices. If mitigations are not available, consider discontinuing the use of the product.