Skip to main content

SD-WAN vulnerabilities

1 published alerts for Cisco SD-WAN.

Actively exploited (KEV)

CVE-2022-20775

Cisco SD-WAN Path Traversal Vulnerability

Cisco SD-WAN is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2022-20775). Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. CISA remediation due date: 2026-02-27. If you need help checking exposure, call (864) 335-9223.