CVE-2022-20775

KEV の『悪用』には未遂(脆弱でない環境やハニーポットでの試行)が含まれ、特定の組織が侵害されたことを意味しない。

KEV の登録内容

vulnerabilityName: Cisco SD-WAN Path Traversal Vulnerability
vendorProject: Cisco
product: SD-WAN
dateAdded: 2026-02-25
shortDescription: Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.
requiredAction: Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.
dueDate: 2026-02-27
knownRansomwareCampaignUse: Unknown
forensicTriage: No
notes: CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sd-wan-priv-E6e8tEdF.html ; https://nvd.nist.gov/vuln/detail/CVE-2022-20775
cwes: CWE-25, CWE-282

初めて観測: 2026-10-02T21:06:48Z / 最後に観測: 2026-10-02T21:06:48Z(last_observed_at。値の変更を最後に確認した時刻)

観測した変更

取り込み開始以降、KEV の値の変更は観測していません。

CVE レコード(CVE Program)

state: PUBLISHED
datePublished: 2022-09-30T18:45:26.687Z
dateUpdated: 2026-03-02T13:12:09.231Z

CNA の affected

Cisco Cisco Catalyst SD-WAN (18.3.1; 19.2.1; 17.2.4; 19.3.0; 18.3.0; 18.3.4; 18.4.303; 18.4.0.1; 17.2.9; 18.3.7; 18.2.0; 17.2.10; 18.4.5; 18.4.0; 17.2.5; 18.3.8; 18.4.4; 18.4.302; 17.2.7; 19.2.098; 20.1.1; 19.2.099; 18.3.3; 18.4.1; 17.2.8; 18.3.5; 19.0.0; 18.4.3; 19.1.0; 17.2.6; 18.3.3.1; 19.2.097; 20.1.1.1; 18.3.6; 19.2.0; 19.2.2; 20.1.11; 20.1.12; 19.1.0a; 19.2.3; 17.3.1ESM1; 20.3.1; 17.3.1ESM2; 17.2.1LA; 20.1.2; 17.3.1ESM3; 19.2.929; 19.2.31; 20.3.2; 19.2.32; 17.3.2ESM1; 20.3.2.1; 18.4.6; 20.4.1; 17.3.2ESM2; 19.2.4; 20.4.1.1; 20.3.3; 20.3.809; 20.3.3.1; 20.5.1; 20.3.811; 20.1.3; 20.4.1.2; 17.4.2.2527; 17.4.2ES1; 17.3.2ESM3; 20.4.2; 20.3.4; 20.6.1; 20.6.1.1; 20.6.2; 20.7.1; 20.4.2.1; 20.3.4.1; 20.5.1.1; 20.6.2.1; 20.3.4.2; 20.4.2.2; 20.6.2.2; 20.5.1.2; 20.7.1.1; 20.3.5; 20.6.3; 20.7.2; 20.6.3.1; 20.6.4; 20.3.6; 20.6.5; 20.3.7; 20.6.5.1; 20.6.4.1; 20.6.3.2; 20.4.2.3; 20.6.1.2; 20.3.4.3; 20.6.5.2; 20.3.3.2; 20.3.7.1; 20.3.5.1; 20.1.3.1; 20.6.5.3; 20.6.3.3; 20.3.7.2; 20.6.5.4; 20.6.4.2; 20.6.5.5; 20.6.3.4; 20.3.8; 20.6.6; 20.6.7; 20.6.8)
Cisco Cisco Catalyst SD-WAN Manager (20.1.12; 19.2.1; 18.4.4; 18.4.5; 20.1.1.1; 20.1.1; 19.3.0; 19.2.2; 19.2.099; 18.3.6; 18.3.7; 19.2.0; 18.3.8; 19.0.0; 19.1.0; 18.4.302; 18.4.303; 19.2.097; 19.2.098; 17.2.10; 18.3.6.1; 19.0.1a; 18.2.0; 18.4.3; 18.4.1; 17.2.8; 18.3.3.1; 18.4.0; 18.3.1; 17.2.6; 17.2.9; 18.3.4; 17.2.5; 18.3.1.1; 18.3.5; 18.4.0.1; 18.3.3; 17.2.7; 17.2.4; 18.3.0; 19.2.3; 18.4.501_ES; 20.3.1; 20.1.2; 19.2.929; 19.2.31; 20.3.2; 19.2.32; 20.3.2_925; 20.3.2.1; 20.3.2.1_927; 18.4.6; 20.1.2_937; 20.4.1; 20.3.2_928; 20.3.2_929; 20.4.1.0.1; 20.3.2.1_930; 19.2.4; 20.5.0.1.1; 20.4.1.1; 20.3.3; 19.2.4.0.1; 20.3.2_937; 20.3.3.1; 20.5.1; 20.1.3; 20.3.3.0.4; 20.3.3.1.2; 20.3.3.1.1; 20.4.1.2; 20.3.3.0.2; 20.4.1.1.5; 20.4.1.0.01; 20.4.1.0.02; 20.3.3.1.7; 20.3.3.1.5; 20.5.1.0.1; 20.3.3.1.10; 20.3.3.0.8; 20.4.2; 20.4.2.0.1; 20.3.4; 20.3.3.0.14; 19.2.4.0.8; 19.2.4.0.9; 20.3.4.0.1; 20.3.2.0.5; 20.6.1; 20.5.1.0.2; 20.3.3.0.17; 20.6.1.1; 20.6.0.18.3; 20.3.2.0.6; 20.6.0.18.4; 20.4.2.0.2; 20.3.3.0.16; 20.3.4.0.5; 20.6.1.0.1; 20.3.4.0.6; 20.6.2; 20.7.1EFT2; 20.3.4.0.9; 20.3.4.0.11; 20.4.2.0.4; 20.3.3.0.18; 20.7.1; 20.6.2.1; 20.3.4.1; 20.5.1.1; 20.4.2.1; 20.4.2.1.1; 20.3.4.1.1; 20.3.813; 20.3.4.0.19; 20.4.2.2.1; 20.5.1.2; 20.3.4.2; 20.3.814; 20.4.2.2; 20.6.2.2; 20.3.4.2.1; 20.7.1.1; 20.3.4.1.2; 20.6.2.2.2; 20.3.4.0.20; 20.6.2.2.3; 20.4.2.2.2; 20.3.5; 20.6.2.0.4; 20.4.2.2.3; 20.3.4.0.24; 20.6.2.2.7; 20.6.3; 20.3.4.2.2; 20.4.2.2.4; 20.7.1.0.2; 20.3.5.0.8; 20.3.5.0.9; 20.3.5.0.7; 20.3.6; 20.3.7; 20.3.5.1; 20.3.4.3; 20.3.3.2; 20.3.7.1; 20.3.4.0.25; 20.6.2.2.4; 20.6.1.2; 20.3.4.0.26; 20.3.7.2; 20.3.8)
Cisco Cisco SD-WAN vContainer (18.4.5; 20.1.12; 18.3.6; 19.2.1; 19.3.0; 20.1.1; 19.2.2; 18.3.8; 18.4.3; 18.4.4; 18.4.302; 19.1.0; 18.4.303; 19.2.0; 19.2.098; 17.2.10; 18.3.7; 18.3.1; 19.2.099; 19.2.097; 18.3.4; 18.2.0; 18.3.5; 18.4.1; 17.2.5; 17.2.7; 17.2.8; 17.2.9; 18.4.0; 17.2.6; 18.3.0; 17.2.4; 18.3.3; 19.2.3; 20.3.1; 20.1.2)
Cisco Cisco SD-WAN vEdge Cloud (19.2.1; 20.1.12; 18.4.4; 19.3.0; 18.3.8; 19.2.2; 20.1.1; 18.3.6; 18.4.3; 18.4.302; 18.4.5; 18.4.303; 19.2.098; 19.1.0; 17.2.10; 19.0.1a; 19.2.099; 18.3.7; 19.2.097; 18.3.1; 19.2.0; 17.2.9; 18.3.4; 18.2.0; 18.4.1; 17.2.5; 18.4.0; 18.3.5; 18.3.3; 17.2.7; 17.2.6; 17.2.8; 18.3.0; 17.2.4; 19.2.3; 20.3.1; 20.1.2; 19.2.929; 19.2.31; 20.3.2; 19.2.32; 18.4.6; 20.4.1; 19.2.4; 20.4.1.1; 20.3.3; 20.5.1; 20.1.3; 20.4.1.2; 20.4.2; 20.3.4; 20.6.1; 20.6.2; 20.7.1; 20.3.5; 20.6.3; 20.7.2; 20.6.4; 20.3.6; 20.6.5; 20.3.7; 20.4.2.3; 20.3.4.3; 20.6.4.1; 20.6.3.2; 20.3.5.1; 20.6.5.2; 20.3.7.1; 20.3.3.2; 20.6.1.2; 20.1.3.1; 20.6.5.3; 20.6.3.3; 20.3.7.2; 20.6.5.4; 20.3.8; 20.6.6; 20.6.7; 20.6.8)
Cisco Cisco SD-WAN vEdge Router (18.4.303; 18.3.7; 19.3.0; 18.2.0; 20.1.12; 19.2.099; 17.2.10; 18.3.3; 18.3.6; 19.0.0; 17.2.6; 18.4.0; 19.1.01; 19.2.098; 18.3.1; 18.4.302; 19.2.2; 18.3.5; 17.2.9; 19.1.0; 20.1.11; 19.2.097; 18.4.5; 17.2.5; 17.2.8; 18.3.8; 18.3.0; 18.4.3; 18.4.4; 19.2.1; 17.2.4; 18.3.4; 19.0.1a; 20.1.1; 17.2.7; 18.4.1; 19.2.0; 19.2.3; 20.3.1; 20.1.2; 19.2.929; 19.2.31; 20.3.2; 19.2.32; 18.4.6; 20.4.1; 19.2.4; 20.4.1.1; 20.3.3; 20.5.1; 20.1.3; 20.4.1.2; 20.4.2; 20.3.4; 20.6.1; 20.6.2; 20.7.1; 20.7.1.2; 20.3.5; 20.6.3; 20.7.2; 20.6.4; 20.3.6; 20.6.5; 20.3.7; 20.6.5.1; 20.3.3.2; 20.6.4.1; 20.6.3.2; 20.3.4.3; 20.6.5.2; 20.3.7.1; 20.3.5.1; 20.6.1.2; 20.6.5.3; 20.6.3.3; 20.3.7.2; 20.6.5.4; 20.3.8; 20.6.6; 20.6.7; 20.6.8)

外部のページ

出典: CISA Known Exploited Vulnerabilities Catalog(CISA KEV。CC0 1.0)。詳しくは出典表記とライセンス。

出典: CVE Program(CVE レコード)。詳しくは出典表記とライセンス。

Copyright © 1999-2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation. MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.

脆弱性の一覧へ