Cisco Vulnerabilities and Affected Products
Vulnerabilities associated with Cisco Catalyst SD-WAN.
Products
Clear product- Cisco Small Business RV Series Router Firmware262 vulnerabilities
- Cisco IOS XE Software248 vulnerabilities
- Cisco Firepower Threat Defense Software161 vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software160 vulnerabilities
- Cisco Identity Services Engine Software156 vulnerabilities
- Cisco Firepower Management Center128 vulnerabilities
- Cisco IOS XR Software107 vulnerabilities
- Cisco NX-OS Software88 vulnerabilities
- Cisco Data Center Network Manager74 vulnerabilities
- Cisco SD-WAN vManage61 vulnerabilities
- Cisco SD-WAN Solution54 vulnerabilities
- Cisco Unified Communications Manager52 vulnerabilities
- Cisco Prime Infrastructure50 vulnerabilities
- Cisco Secure Firewall Threat Defense (FTD) Software48 vulnerabilities
- Cisco Webex Meetings46 vulnerabilities
- Cisco Catalyst SD-WAN Manager45 vulnerabilities
- IOS41 vulnerabilities
- Cisco Enterprise NFV Infrastructure Software39 vulnerabilities
- Cisco IOS36 vulnerabilities
- Cisco Unified Contact Center Express36 vulnerabilities
- Cisco WebEx WRF Player35 vulnerabilities
- Cisco Digital Network Architecture Center (DNA Center)33 vulnerabilities
- Cisco Unified Computing System (Managed)33 vulnerabilities
- Cisco Secure Firewall Adaptive Security Appliance (ASA) Software31 vulnerabilities
- Cisco Unity Connection31 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-20655HIGH | A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege… CWE-78Nov 15, 2024 | CVSS8.8v3.1 | EPSS0.832% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-20775HIGH | Cisco SD-WAN Software Privilege Escalation VulnerabilityA vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to improper access controls on commands within the application CLI. An attacker could exploit this vulnerability by running a maliciously crafted command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user. Cisco has released software updates that address this vulnerability. The… | CVSS7.8v3.1 | EPSS12.5% | PoCs0 | SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |