Search/CVE-2022-20818
● CVE — High

CVE-2022-20818

VendorciscoProductsd-wan, sd-wan vmanage, sd-wan vbond orchestrator, sd-wan vsmart controllerDiscoveredSep 30, 2022UpdatedNov 21, 2024

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

CVSS v3.1
7.8 HIGH
EPSS
0.63%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Sep 28, 2026
▲ 0.03pp
0.60% → 0.63% over 4 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Timeline
disclosure → media coverage
Sep 30, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024
Public PoC (1)
Unverified third-party code — review before executing.