Cisco Catalyst SD-WAN vulnerabilities

2 known vulnerabilities in Cisco Catalyst SD-WAN from Cisco. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Cisco IOS XR Software: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-20655Nov 15, 2024Cisco

  A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected devi

• 7.8 High severity

  Cisco SD-WAN Path Traversal Exploited

  CVE-2022-20775Sep 30, 2022CiscoEPSS 12%

  A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerabi