Cisco SD-WAN Software Privilege Escalation Vulnerabilities

🗓️ 28 Sep 2022 16:00:00Reported by CiscoType

Cisco SD-WAN Software Privilege Escalation Vulnerabilities - Elevated privileges via CL

Reporter	Title	Published	Views	Family All 39
GithubExploit	Exploit for Path Traversal in Cisco Catalyst_Sd-Wan_Manager	27 Feb 202600:26	–	githubexploit
GithubExploit	Exploit for Path Traversal in Cisco Sd-Wan_Vbond_Orchestrator	13 Jan 202400:17	–	githubexploit
ATTACKERKB	CVE-2022-20775	28 Sep 202216:00	–	attackerkb
ATTACKERKB	CVE-2022-20818	28 Sep 202216:00	–	attackerkb
ATTACKERKB	CVE-2026-20127	25 Feb 202616:14	–	attackerkb
BDU FSTEC	The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage arises from incorrect path name restrictions related to restricted access directories. This vulnerability allows attackers to create or re-record critical files.	24 Dec 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the command-line interface of microprogramming software for Cisco SD-WAN vBond Orchestrator, Cisco SD-WAN vEdge Cloud Routers, Cisco SD-WAN vEdge Routers, Cisco SD-WAN vSmart Controller, and the centralized network management system Cisco SD-WAN vManage arises from incorrect path name restrictions related to restricted access directories. This vulnerability allows attackers to create or re-record critical files.	24 Dec 202200:00	–	bdu_fstec
Circl	CVE-2022-20775	30 Sep 202222:36	–	circl
Circl	CVE-2022-20818	30 Sep 202222:36	–	circl
CISA KEV Catalog	Cisco SD-WAN Path Traversal Vulnerability	25 Feb 202600:00	–	cisa_kev