Skip to content
OpenAdvisories
High · 7.8 Public exploit CVE-2022-20818 EUVD-2022-26068GHSA-8whp-gj34-8pwr

Cisco SD-WAN Software Privilege Escalation Vulnerabilities

Published Sep 30, 2022 · Updated Nov 3, 2026 · Assigned by cisco

Vendor: Cisco Product: Cisco SD-WAN Solution Category: Network devices

Description

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

Affected products

VendorProductAffectedFixed
Cisco Cisco SD-WAN Solution — —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • mbadanoiu/CVE-2022-20818 ★ 1 · Jan 13, 2024

    CVE-2022-20818: Local Privilege Escalation via Partial File Read in Cisco SD-WAN

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References