Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2022-20850

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary file path information when using commands in the CLI of an affected device. A successful exploit could allow the attacker to delete arbitrary files from the file system of the affected device.

SeverityMEDIUM
CVSS5.5
CWECWE-22
KEV No
Published
Modified

Related Products

Product Advisory Evidence
Cisco IOS cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln
Cisco Integrated Services Virtual Router cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln
Cisco 4000 Series Integrated Services Routers cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln
Cisco 1000 Series Integrated Services Routers cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln
Cisco IOS XE Catalyst SD-WAN cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln
Cisco Catalyst SD-WAN Manager cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln
Cisco Catalyst SD-WAN cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln
Cisco ASR 1000 Series Aggregation Services Routers cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln
Cisco Catalyst 9600 Series Switches cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches cisco-sa-arb-file-delete-VB2rVcQv Cisco OpenVuln · software-dependent