The vulnerability of the CLI command-line interface of the ConfD Common Execution Environment (CEE) deployment and management environment for cloud network functions based on Cisco Ultra Cloud Core – Subscriber Microservices Infrastructure (SMI) allows a malicious actor to execute arbitrary commands and gain elevated privileges.

🗓️ 28 Mar 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

ConfD CLI vulnerability enables command execution and privilege escalation due to access control flaws.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-20762	2 Mar 202216:00	–	attackerkb
Circl	CVE-2022-20762	3 Mar 202213:14	–	circl
Cisco	Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability	2 Mar 202216:00	–	cisco
CNNVD	Cisco Ultra Cloud Core 安全漏洞	2 Mar 202200:00	–	cnnvd
CVE	CVE-2022-20762	6 Apr 202218:13	–	cve
Cvelist	CVE-2022-20762 Cisco Ultra Cloud Core - Subscriber Microservices Infrastructure Privilege Escalation Vulnerability	6 Apr 202218:13	–	cvelist
EUVD	EUVD-2022-26012	3 Oct 202520:07	–	euvd
Malwarebytes	Update now! Cisco fixes several vulnerabilities	4 Mar 202218:10	–	malwarebytes
NVD	CVE-2022-20762	6 Apr 202219:15	–	nvd
OSV	CVE-2022-20762	6 Apr 202219:15	–	osv

Vulners

Node

cisco_systems cisco_ultra_cloud_core_-_subscriber_microservices_infrastructure_(smi)Range2020.02.2–2020.02.2.47

OR

cisco_systems cisco_ultra_cloud_core_-_subscriber_microservices_infrastructure_(smi)Range2020.02.6–2020.02.7.07

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022030222
cisco	www.cisco.com/c/en/us/support/docs/csa/cisco-sa-uccsmi-prvesc-BQHGe4cm.html
web	www.web.nvd.nist.gov/view/vuln/detail

28 Mar 2022 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

CVSS 37.8

EPSS0.00046

confD environment command execution privilege escalation access control flaws cloud network functions subscriber microservices