Search/CVE-2022-20716
● CVE — High

CVE-2022-20716

VendorciscoProductsd-wan, catalyst sd-wan manager, sd-wan vbond orchestrator, sd-wan solution, sd-wan vedge cloud, sd-wan vedge router, sd-wan vsmart controller softwareDiscoveredApr 15, 2022UpdatedNov 21, 2024

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper access control on files within the affected system. A local attacker could exploit this vulnerability by modifying certain files on the vulnerable device. If successful, the attacker could gain escalated privileges and take actions on the system with the privileges of the root user.

CVSS v3.1
7.8 HIGH
EPSS
0.22%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 5, 2026
● 0.00pp
0.21% → 0.22% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
8 relationships
Timeline
disclosure → media coverage
Apr 15, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024