---
id: CVE-2022-20818
title: >-
  Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an
  authenticated, local attacker to gain elevated privileges
summary: >-
  Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an
  authenticated, local attacker to gain elevated privileges. These
  vulnerabilities are due to improper access controls on commands within the
  application CLI. An a…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-25
  - CWE-22
vendor: cisco
product: sd-wan_vbond_orchestrator
affected:
  - sd-wan_vbond_orchestrator < 20.9
  - sd-wan_vmanage < 20.9
  - sd-wan_vsmart_controller < 20.9
  - sd-wan < 20.9
patched:
  - sd-wan_vbond_orchestrator 20.9
  - sd-wan_vmanage 20.9
  - sd-wan_vsmart_controller 20.9
  - sd-wan 20.9
published: '2022-09-30'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T22:17:08.990'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-20818'
references:
  - url: >-
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
    label: psirt@cisco.com
  - url: >-
      https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-priv-E6e8tEdF
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
  - exploit-available
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-02-26T04:55:50.786814Z'
epss: 0.00616
epssPercentile: 0.49616
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/mbadanoiu/CVE-2022-20818'
  checkedAt: '2026-11-05T06:38:49.867Z'
ingestedAt: '2026-11-05T06:38:03.557Z'
---

## Overview

Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities are due to improper access controls on commands within the application CLI. An attacker could exploit these vulnerabilities by running a malicious command on the application CLI. A successful exploit could allow the attacker to execute arbitrary commands as the root user.

## Affected

- `sd-wan_vbond_orchestrator < 20.9`
- `sd-wan_vmanage < 20.9`
- `sd-wan_vsmart_controller < 20.9`
- `sd-wan < 20.9`

## Remediation

Upgrade past the affected range:

- `sd-wan_vbond_orchestrator 20.9`
- `sd-wan_vmanage 20.9`
- `sd-wan_vsmart_controller 20.9`
- `sd-wan 20.9`