← Back to browse · API

CVE-2022-20775

Severity
HIGH
CVSS
7.8
EPSS
0.12475
Risk score
60.57
CISA KEV
Yes
PoC
No
Published
2026-02-25
Modified
2026-02-25
First seen
2026-08-07
Aliases
EUVD-2022-26025, GHSA-X65R-RVGH-V43V
Products
Cisco:Cisco Catalyst SD-WAN 17.2.4, Cisco:Cisco Catalyst SD-WAN 17.3.1ESM1, Cisco:Cisco Catalyst SD-WAN 19.1.0a, Cisco:Cisco Catalyst SD-WAN 19.2.0, Cisco:Cisco Catalyst SD-WAN 20.1.11, Cisco:Cisco Catalyst SD-WAN 20.3.2.1, Cisco:Cisco Catalyst SD-WAN 20.5.1, Cisco:Cisco Catalyst SD-WAN Manager 18.3.1.1, Cisco:Cisco Catalyst SD-WAN Manager 18.3.5, Cisco:Cisco Catalyst SD-WAN Manager 19.0.1a, Cisco:Cisco Catalyst SD-WAN Manager 19.3.0, Cisco:Cisco Catalyst SD-WAN Manager 20.1.1, Cisco:Cisco Catalyst SD-WAN Manager 20.3.3.0.17, Cisco:Cisco Catalyst SD-WAN Manager 20.3.3.0.8, Cisco:Cisco Catalyst SD-WAN Manager 20.3.4.0.11, Cisco:Cisco Catalyst SD-WAN Manager 20.3.7.2, Cisco:Cisco Catalyst SD-WAN Manager 20.4.2.0.1, Cisco:Cisco Catalyst SD-WAN Manager 20.4.2.2.4, Cisco:Cisco Catalyst SD-WAN Manager 20.6.2.1, Cisco:Cisco Catalyst SD-WAN Manager 20.6.2.2.7, Cisco:Cisco Catalyst SD-WAN Manager 20.7.1.1, Cisco:Cisco Catalyst SD-WAN Manager 20.7.1EFT2, Cisco:Cisco SD-WAN vContainer 17.2.6, Cisco:Cisco SD-WAN vContainer 18.3.3, Cisco:Cisco SD-WAN vContainer 18.3.5, Cisco:Cisco SD-WAN vContainer 18.4.1, Cisco:Cisco SD-WAN vContainer 18.4.303, Cisco:Cisco SD-WAN vContainer 19.2.2, Cisco:Cisco SD-WAN vContainer 20.1.12, Cisco:Cisco SD-WAN vContainer 20.3.1, Cisco:Cisco SD-WAN vEdge Cloud 17.2.9, Cisco:Cisco SD-WAN vEdge Cloud 18.3.3, Cisco:Cisco SD-WAN vEdge Cloud 18.4.1, Cisco:Cisco SD-WAN vEdge Cloud 18.4.302, Cisco:Cisco SD-WAN vEdge Cloud 18.4.4, Cisco:Cisco SD-WAN vEdge Cloud 19.2.099, Cisco:Cisco SD-WAN vEdge Cloud 19.2.1, Cisco:Cisco SD-WAN vEdge Cloud 19.2.3, Cisco:Cisco SD-WAN vEdge Cloud 20.1.12, Cisco:Cisco SD-WAN vEdge Cloud 20.6.3.2, Cisco:Cisco SD-WAN vEdge Cloud 20.6.5.3, Cisco:Cisco SD-WAN vEdge Cloud 20.6.6, Cisco:Cisco SD-WAN vEdge Router 17.2.10, Cisco:Cisco SD-WAN vEdge Router 18.3.0, Cisco:Cisco SD-WAN vEdge Router 18.3.6, Cisco:Cisco SD-WAN vEdge Router 19.2.4, Cisco:Cisco SD-WAN vEdge Router 20.1.2, Cisco:Cisco SD-WAN vEdge Router 20.3.5, Cisco:Cisco SD-WAN vEdge Router 20.6.4, Cisco:Cisco SD-WAN vEdge Router 20.6.7, Cisco:SD-WAN
Sources
euvd EUVD-2022-26025
cisa.gov CVE-2022-20775

Description

Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

References