All vulnerabilities
CVE-2022-20775GHSA-wmjv-552v-pxjc

Cisco SD-WAN Path Traversal Vulnerability

Cisco SD-WANNetwork & edge
Open in ThreatlineRecord JSON
CVSS
7.8High
ExploitationExploited in the wildAdded to KEV 25 Feb 2026CISA KEV
Exploit odds (EPSS)12.5%Chance of exploitation activity in the next 30 days, higher than 96% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline27 Feb 2026Remediation due date for US federal agenciesCISA KEV
CISA required actionPlease adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 30 Sep 2022, 18:45 UTCPublishedCVE List
  2. 25 Feb 2026Added to CISA KEVCISA KEV

Description

Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

Text from CVE List

Affected versions 150

  • Cisco Catalyst SD-WANaffected: 18.3.1CVE List
  • Cisco Catalyst SD-WANaffected: 19.2.1CVE List
  • Cisco Catalyst SD-WANaffected: 17.2.4CVE List
  • Cisco Catalyst SD-WANaffected: 19.3.0CVE List
  • Cisco Catalyst SD-WANaffected: 18.3.0CVE List
  • Cisco Catalyst SD-WANaffected: 18.3.4CVE List
  • Cisco Catalyst SD-WANaffected: 18.4.303CVE List
  • Cisco Catalyst SD-WANaffected: 18.4.0.1CVE List
  • Cisco Catalyst SD-WANaffected: 17.2.9CVE List
  • Cisco Catalyst SD-WANaffected: 18.3.7CVE List
  • Cisco Catalyst SD-WANaffected: 18.2.0CVE List
  • Cisco Catalyst SD-WANaffected: 17.2.10CVE List
  • Cisco Catalyst SD-WANaffected: 18.4.5CVE List
  • Cisco Catalyst SD-WANaffected: 18.4.0CVE List
  • Cisco Catalyst SD-WANaffected: 17.2.5CVE List
  • Cisco Catalyst SD-WANaffected: 18.3.8CVE List
  • Cisco Catalyst SD-WANaffected: 18.4.4CVE List
  • Cisco Catalyst SD-WANaffected: 18.4.302CVE List
  • Cisco Catalyst SD-WANaffected: 17.2.7CVE List
  • Cisco Catalyst SD-WANaffected: 19.2.098CVE List
  • Cisco Catalyst SD-WANaffected: 20.1.1CVE List
  • Cisco Catalyst SD-WANaffected: 19.2.099CVE List
  • Cisco Catalyst SD-WANaffected: 18.3.3CVE List
  • Cisco Catalyst SD-WANaffected: 18.4.1CVE List
  • Cisco Catalyst SD-WANaffected: 17.2.8CVE List
  • Cisco Catalyst SD-WANaffected: 18.3.5CVE List
  • Cisco Catalyst SD-WANaffected: 19.0.0CVE List
  • Cisco Catalyst SD-WANaffected: 18.4.3CVE List
  • Cisco Catalyst SD-WANaffected: 19.1.0CVE List
  • Cisco Catalyst SD-WANaffected: 17.2.6CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 20.1.12CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.2.1CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.4.4CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.4.5CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 20.1.1.1CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 20.1.1CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.3.0CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.2.2CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.2.099CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.3.6CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.3.7CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.2.0CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.3.8CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.0.0CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.1.0CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.4.302CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.4.303CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.2.097CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.2.098CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 17.2.10CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.3.6.1CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 19.0.1aCVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.2.0CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.4.3CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.4.1CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 17.2.8CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.3.3.1CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.4.0CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 18.3.1CVE List
  • Cisco Catalyst SD-WAN Manageraffected: 17.2.6CVE List
  • Cisco SD-WAN vContaineraffected: 18.4.5CVE List
  • Cisco SD-WAN vContaineraffected: 20.1.12CVE List
  • Cisco SD-WAN vContaineraffected: 18.3.6CVE List
  • Cisco SD-WAN vContaineraffected: 19.2.1CVE List
  • Cisco SD-WAN vContaineraffected: 19.3.0CVE List
  • Cisco SD-WAN vContaineraffected: 20.1.1CVE List
  • Cisco SD-WAN vContaineraffected: 19.2.2CVE List
  • Cisco SD-WAN vContaineraffected: 18.3.8CVE List
  • Cisco SD-WAN vContaineraffected: 18.4.3CVE List
  • Cisco SD-WAN vContaineraffected: 18.4.4CVE List
  • Cisco SD-WAN vContaineraffected: 18.4.302CVE List
  • Cisco SD-WAN vContaineraffected: 19.1.0CVE List
  • Cisco SD-WAN vContaineraffected: 18.4.303CVE List
  • Cisco SD-WAN vContaineraffected: 19.2.0CVE List
  • Cisco SD-WAN vContaineraffected: 19.2.098CVE List
  • Cisco SD-WAN vContaineraffected: 17.2.10CVE List
  • Cisco SD-WAN vContaineraffected: 18.3.7CVE List
  • Cisco SD-WAN vContaineraffected: 18.3.1CVE List
  • Cisco SD-WAN vContaineraffected: 19.2.099CVE List
  • Cisco SD-WAN vContaineraffected: 19.2.097CVE List
  • Cisco SD-WAN vContaineraffected: 18.3.4CVE List
  • Cisco SD-WAN vContaineraffected: 18.2.0CVE List
  • Cisco SD-WAN vContaineraffected: 18.3.5CVE List
  • Cisco SD-WAN vContaineraffected: 18.4.1CVE List
  • Cisco SD-WAN vContaineraffected: 17.2.5CVE List
  • Cisco SD-WAN vContaineraffected: 17.2.7CVE List
  • Cisco SD-WAN vContaineraffected: 17.2.8CVE List
  • Cisco SD-WAN vContaineraffected: 17.2.9CVE List
  • Cisco SD-WAN vContaineraffected: 18.4.0CVE List
  • Cisco SD-WAN vContaineraffected: 17.2.6CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.2.1CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 20.1.12CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.4.4CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.3.0CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.3.8CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.2.2CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 20.1.1CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.3.6CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.4.3CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.4.302CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.4.5CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.4.303CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.2.098CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.1.0CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 17.2.10CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.0.1aCVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.2.099CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.3.7CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.2.097CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.3.1CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 19.2.0CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 17.2.9CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.3.4CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.2.0CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.4.1CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 17.2.5CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.4.0CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.3.5CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 18.3.3CVE List
  • Cisco SD-WAN vEdge Cloudaffected: 17.2.7CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.4.303CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.3.7CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.3.0CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.2.0CVE List
  • Cisco SD-WAN vEdge Routeraffected: 20.1.12CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.2.099CVE List
  • Cisco SD-WAN vEdge Routeraffected: 17.2.10CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.3.3CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.3.6CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.0.0CVE List
  • Cisco SD-WAN vEdge Routeraffected: 17.2.6CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.4.0CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.1.01CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.2.098CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.3.1CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.4.302CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.2.2CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.3.5CVE List
  • Cisco SD-WAN vEdge Routeraffected: 17.2.9CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.1.0CVE List
  • Cisco SD-WAN vEdge Routeraffected: 20.1.11CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.2.097CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.4.5CVE List
  • Cisco SD-WAN vEdge Routeraffected: 17.2.5CVE List
  • Cisco SD-WAN vEdge Routeraffected: 17.2.8CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.3.8CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.3.0CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.4.3CVE List
  • Cisco SD-WAN vEdge Routeraffected: 18.4.4CVE List
  • Cisco SD-WAN vEdge Routeraffected: 19.2.1CVE List

References 7