CVE-2022-20850 Cisco SD-WAN Arbitrary File Deletion Vulnerability

Medium 5.5 Published 30 Sep 2022 Updated 1 Nov 2024

An authenticated local attacker can delete arbitrary files on Cisco SD-WAN devices via CLI input validation flaws.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-20850?

CVE-2022-20850 is a medium-severity path traversal vulnerability in Cisco SD-WAN Solution, published on 30 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in the CLI of stand-alone Cisco IOS XE SD-WAN Software and Cisco SD-WAN Software could allow an authenticated, local attacker to delete arbitrary files from the file system of an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by injecting arbitrary file path information when using commands in the CLI of an affected device. A successful exploit could allow the attacker to delete arbitrary files from the file system of the affected device.

Weakness: CWE-20, CWE-22

Which versions are affected by CVE-2022-20850?

It affects 5 products.

Products include Cisco Ios Xe Sd-Wan, Cisco Sd-Wan, Cisco Sd-Wan Vbond Orchestrator, Cisco Sd-Wan Vmanage, Cisco Sd-Wan Vsmart Controller.

How do I fix CVE-2022-20850?

No fix has been published for CVE-2022-20850 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2022-20850 being exploited?

There is no known exploitation of CVE-2022-20850 in the wild and no public exploit code.

Sources

Also known as GHSA-5rf9-q3f5-rc77.