{"affected":[{"product":"Cisco SD-WAN Solution","source":"CNA: cisco","vendor":"Cisco","versions":[{"status":"affected","version":"n/a"}]}],"cpeConfigurations":[{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*","versionEndExcluding":"20.9","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*","versionEndExcluding":"20.9","vulnerable":true},{"criteria":"cpe:2.3:a:cisco:sd-wan_vsmart_controller:*:*:*:*:*:*:*:*","versionEndExcluding":"20.9","vulnerable":true}],"negate":false,"operator":"OR"}],"operator":"OR"},{"negate":false,"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:cisco:sd-wan:*:*:*:*:*:*:*:*","versionEndExcluding":"20.9","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:a:cisco:catalyst_8000v_edge:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:a:cisco:catalyst_cg418-e:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:a:cisco:catalyst_cg522-e:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1100-4g_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1100-6g_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1131_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4000_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4321\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4321\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4321\\/k9_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4331\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4331\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4331\\/k9_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4351\\/k9-rf_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4351\\/k9-ws_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4351\\/k9_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8101-32fh:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8101-32h:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8102-64h:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8201-32fh:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8804:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:8831:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1001-hx:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1001-hx_r:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1001-x_r:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1002-hx:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1002-hx_r:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1002-x_r:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1006-x:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1009-x:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:asr_1023:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8200:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8300:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8500:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8500-4qc:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8510csr:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8510msr:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8540csr:-:*:*:*:*:*:*:*","vulnerable":false},{"criteria":"cpe:2.3:h:cisco:catalyst_8540msr:-:*:*:*:*:*:*:*","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveId":"CVE-2022-20818","cwes":["CWE-25","CWE-22"],"description":"Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.","epss":{"date":"2026-11-03","percentile":0.49546,"score":0.00616},"exploits":[],"kev":null,"metrics":[{"score":7.8,"severity":"high","source":"CNA: cisco","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":7.8,"severity":"high","source":"NVD: nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},{"score":7.8,"severity":"high","source":"NVD: psirt@cisco.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}],"modifiedAt":1793749667453,"publishedAt":1664563536170,"references":[{"source":"CNA: cisco","tags":["vendor-advisory","x_refsource_CISCO"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF"},{"source":"ADP: CVE","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF"},{"source":"psirt@cisco.com","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF"}],"remediation":[],"revision":"98f3eb85114e608f6542a9e39c4aedf275aa874d77094b881740be62b84e6722","sources":[{"modifiedAt":1793749667453,"name":"CNA: cisco","retrievedAt":1793750903083,"url":"https://www.cve.org/CVERecord?id=CVE-2022-20818"},{"modifiedAt":1793744228990,"name":"NVD","retrievedAt":1793751347897,"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-20818"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793743811896,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-20818"}],"ssvc":{"assessedAt":1772081750786,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"total"},"status":"published","title":"Cisco SD-WAN Software Privilege Escalation Vulnerabilities","updatedAt":1793751347897}