CVE-2022-20775: Technical Deep-Dive (Auto Refreshed)

Generated on 2026-03-22T22:31:14.069Z. This file is automatically regenerated every 30 minutes by the CVE AI enrichment job using web sources (NVD, MITRE, CISA KEV, GitHub).

Executive Technical Summary

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF

• Context preserved from previous revision: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF Notes: test 反向辣鸡数据投放 CVE-2022-23305 工具 利用 教程 Exploit POC

Technical Details

• CVE: CVE-2022-20775
• KEV date added: 2026-02-25
• KEV due date: 2026-02-27
• NVD published: 2022-09-30
• NVD modified: 2026-02-26
• MITRE modified: 2026-03-02
• CVSS base score: 7.8
• CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
• CVSS exploitability score: 1.8
• CVSS impact score: 5.9
• Attack vector: Local
• Attack complexity: Low
• Privileges required: Low
• User interaction: None
• Scope: Unchanged
• Confidentiality impact: High
• Integrity impact: High
• Availability impact: High

Versions and Products Impacted

• cisco / catalyst sd-wan manager (versions: < 20.6.3)
• cisco / catalyst sd-wan manager (versions: >= 20.7, < 20.7.2)
• cisco / catalyst sd-wan manager (versions: 20.8)
• cisco / sd-wan vbond orchestrator (versions: < 20.6.3)
• cisco / sd-wan vbond orchestrator (versions: >= 20.7, < 20.7.2)
• cisco / sd-wan vbond orchestrator (versions: 20.8)
• cisco / sd-wan vedge cloud (versions: < 20.6.3)
• cisco / sd-wan vedge cloud (versions: >= 20.7, < 20.7.2)
• cisco / sd-wan vedge cloud (versions: 20.8)
• cisco / sd-wan vsmart controller (versions: < 20.6.3)
• cisco / sd-wan vsmart controller (versions: >= 20.7, < 20.7.2)
• cisco / sd-wan vsmart controller (versions: 20.8)
• cisco / sd-wan (versions: < 20.6.3)
• cisco / sd-wan (versions: >= 20.7, < 20.7.2)
• cisco / sd-wan (versions: 20.8)
• Cisco / Cisco Catalyst SD-WAN (versions: 18.3.1, 19.2.1, 17.2.4, 19.3.0, 18.3.0, 18.3.4, 18.4.303, 18.4.0.1, 17.2.9, 18.3.7)
• Cisco / Cisco Catalyst SD-WAN Manager (versions: 20.1.12, 19.2.1, 18.4.4, 18.4.5, 20.1.1.1, 20.1.1, 19.3.0, 19.2.2, 19.2.099, 18.3.6)
• Cisco / Cisco SD-WAN vContainer (versions: 18.4.5, 20.1.12, 18.3.6, 19.2.1, 19.3.0, 20.1.1, 19.2.2, 18.3.8, 18.4.3, 18.4.4)
• Cisco / Cisco SD-WAN vEdge Cloud (versions: 19.2.1, 20.1.12, 18.4.4, 19.3.0, 18.3.8, 19.2.2, 20.1.1, 18.3.6, 18.4.3, 18.4.302)
• Cisco / Cisco SD-WAN vEdge Router (versions: 18.4.303, 18.3.7, 19.3.0, 18.2.0, 20.1.12, 19.2.099, 17.2.10, 18.3.3, 18.3.6, 19.0.0)

Weakness Classification

• CWE-25
• CWE-22

Repositories for Lab Validation (Public Examples)

• AlphabugX/CVE-2022-RCE | stars: 5 | updated: 2025-09-27 | https://github.com/AlphabugX/CVE-2022-RCE
  Notes: test 反向辣鸡数据投放 CVE-2022-23305 工具 利用 教程 Exploit POC

People and Organizations Mentioned

• cisco
• SD-WAN
• AlphabugX

Practical Defensive Validation (Authorized Only)

1. Use only isolated environments and systems you own or are explicitly authorized to test.
2. Snapshot infrastructure before validation and preserve baseline logs (EDR, SIEM, OS, app).
3. Inventory cisco / catalyst sd-wan manager (versions: < 20.6.3) assets and confirm exact vulnerable versions with automated checks.
4. Patch in staged environments and validate closure with scanners + service health checks.
5. Map detections to MITRE ATT&CK tactics relevant to your environment and tune alert quality.

References

• NVD record: https://nvd.nist.gov/vuln/detail/CVE-2022-20775
• MITRE CVE record: https://www.cve.org/CVERecord?id=CVE-2022-20775
• CISA KEV Catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• CISA KEV JSON feed: https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json
• KEV notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sd-wan-priv-E6e8tEdF.html ; https://nvd.nist.gov/vuln/detail/CVE-2022-20775
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
• https://github.com/orangecertcc/security-research/security/advisories/GHSA-wmjv-552v-pxjc
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-20775
• Repository example: https://github.com/AlphabugX/CVE-2022-RCE

This content is for defensive security training and authorized validation only.