CVE:CVE-2022-20775
CNNVD:CNNVD-202209-2884
Cisco SD-WAN是美国思科（Cisco）公司的一种高度安全的云规模架构，具有开放性、可编程性和可扩展性。
Cisco SD-WAN Software存在路径遍历漏洞，该漏洞源于对应用程序CLI中的命令的访问控制不当，可能允许经过身份验证的本地攻击者获得提升的权限，成功利用此漏洞可以让攻击者执行任意命令。
solution:Upgrade cisco sd-wan_vbond_orchestrator to a higher version than 20.6.3,20.7.2,20.8,and avoid the version [20.6,20.6.3),[20.7,20.7.2),20.8; Upgrade cisco sd-wan_vmanage to a higher version than 20.6.3,20.7.2,20.8,and avoid the version [20.6,20.6.3),[20.7,20.7.2),20.8; Upgrade cisco sd-wan_vsmart_controller to a higher version than 20.6.3,20.7.2,20.8,and avoid the version [20.6,20.6.3),[20.7,20.7.2),20.8; Upgrade cisco sd-wan to a higher version than 20.6.3,20.7.2,20.8,and avoid the version [20.6,20.6.3),[20.7,20.7.2),20.8