جزئیات آسیبپذیری
CVE-2022-20655
Cisco Carrier Packet TransportCisco Catalyst SD-WANCisco Catalyst SD-WAN ManagerCisco Enterprise NFV Infrastructure SoftwareCisco IOS XE Catalyst SD-WANCisco IOS XR Software
CVSS 3.1
8.8بالا
شرح رسمی (انگلیسی)
A vulnerability in the implementation of the CLI on a device that is running ConfD could allow an authenticated, local attacker to perform a command injection attack. The vulnerability is due to insufficient validation of a process argument on an affected device. An attacker could exploit this vulnerability by injecting commands during the execution of this process. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privilege level of ConfD, which is commonly root.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.8بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
محصولات آسیبپذیر
| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Cisco | Cisco Carrier Packet Transport | 1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 1.0.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 1.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 1.1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 1.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 10.8.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 12.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.0.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.0.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 2.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.0.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.0.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.0.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.1.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.2.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.0.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.1.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.1.82 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.5.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 4.7.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 6.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 7.0.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 7.0.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.5.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.5.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.5.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.521 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.7.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.8.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Carrier Packet Transport | 9.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN | همه | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Catalyst SD-WAN Manager | همه | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Enterprise NFV Infrastructure Software | همه | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Catalyst SD-WAN | همه | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XR Software | همه | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Network Services Orchestrator | همه | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco SD-WAN vEdge Router | همه | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Ultra Gateway Platform | همه | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Virtual Topology System (VTS) | همه | CVEProject cvelistV5 (CNA) |
| Cisco | carrier_packet_transport | همه | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | v < 18.4.4 | CISA ADP / Vulnrichment |
| Cisco | catalyst_sd-wan_manager | 19.2.0 ≤ v < 19.2.1 | CISA ADP / Vulnrichment |
| Cisco | enterprise_nfv_infrastructure_software | v < 3.12.1 | CISA ADP / Vulnrichment |
| Cisco | ios_xe_catalyst_sd-wan | v < 16.10.2 | CISA ADP / Vulnrichment |
| Cisco | ios_xe_catalyst_sd-wan | 16.12.0 ≤ v < 16.12.1b | CISA ADP / Vulnrichment |
| Cisco | ios_xe_catalyst_sd-wan | 17.2.0 ≤ v < 17.2.1r | CISA ADP / Vulnrichment |
| Cisco | ios_xr_software | v < 7.0.2 | CISA ADP / Vulnrichment |
| Cisco | ios_xr_software | 7.1.0 ≤ v < 7.1.1 | CISA ADP / Vulnrichment |
| Cisco | network_services_orchestrator | v < 4.3.9.1 | CISA ADP / Vulnrichment |
| Cisco | network_services_orchestrator | 4.4.0.0 ≤ v < 4.4.5.6 | CISA ADP / Vulnrichment |
| Cisco | network_services_orchestrator | 4.5.0 ≤ v < 4.5.7 | CISA ADP / Vulnrichment |
| Cisco | network_services_orchestrator | 4.6.0 ≤ v < 4.6.1.7 | CISA ADP / Vulnrichment |
| Cisco | network_services_orchestrator | 4.7.0 ≤ v < 4.7.1 | CISA ADP / Vulnrichment |
| Cisco | network_services_orchestrator | 5.1.0 ≤ v < 5.1.0.1 | CISA ADP / Vulnrichment |
| Cisco | sd-wan_vedge_router | v < 18.4.4 | CISA ADP / Vulnrichment |
| Cisco | sd-wan_vedge_router | 19.2.0 ≤ v < 19.2.1 | CISA ADP / Vulnrichment |
| Cisco | virtual_topology_system | v < 2.6.5 | CISA ADP / Vulnrichment |
منابع و راهنماها
۲
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۳/۰۸/۲۵
- آخرین بهروزرسانی
- ۱۴۰۳/۰۸/۲۶
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیشبینی بهرهبرداری (EPSS)
۰٫۸۲٪
احتمال بهرهبرداری در ۳۰ روز
۵۷٫۶٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')