CVE-2022-27506

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published
Apr 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-275076.5Authenticated denial of serviceCVE-2022-275087.5Unauthenticated denial of serviceCVE-2022-275096.1Unauthenticated redirection to a malicious websiteCVE-2022-27519.8A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionaCVE-2022-275109.8Unauthorized access to Gateway user capabilitiesCVE-2022-275118.1Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the neCVE-2022-275125.3Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix CVE-2022-275139.6Remote desktop takeover via phishingCVE-2022-275169.8User login brute force protection functionality bypassCVE-2022-275189.8Unauthenticated remote arbitrary code executionCVE-2022-27527.8A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conCVE-2022-275237.1A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a ma
CVE-2022-27506: Low severity, CVSS 2.7 | Vulnix