CVE-2022-20655
At a glance
- Severity
- HIGH 8.8
- EPSS
- EPSS 0.83 % · percentile 57 (2026-10-27)
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Deferred
Description
A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root.
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | cisco |
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | NVD · psirt@cisco.com (Secondary) |
Weaknesses (CWE)
European references
- ENISA EUVD · EUVD-2022-25905
- GCVE · GCVE-0-2022-20655
CERT-FR advisories
- CERTFR-2022-AVI-060 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco IOS XR Software | affected N/A |
| Cisco · Cisco Virtual Topology System (VTS) | affected N/A |
| Cisco · Cisco Network Services Orchestrator | affected N/A |
| Cisco · Cisco Enterprise NFV Infrastructure Software | affected N/A |
| Cisco · Cisco Catalyst SD-WAN | affected N/A |
| Cisco · Cisco Catalyst SD-WAN Manager | affected N/A |
| Cisco · Cisco IOS XE Catalyst SD-WAN | affected N/A |
| Cisco · Cisco SD-WAN vEdge Router | affected N/A |
| Cisco · Cisco Ultra Gateway Platform | affected N/A |
| Cisco · Cisco Carrier Packet Transport | affected 3.5 ; affected 3.1 ; affected 3.2 ; affected 2.5 ; affected 2.0 ; affected 9.2.2 |
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cli-cmdinj-4MttWZPB
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-confdcli-cmdinj-wybQDSSh
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |