What is CVE-2022-20921?

CVE-2022-20921 is a high-severity vulnerability in Cisco Aci_multi-site_orchestrator, classified under Improper Authorization. CVSS score: 8.8/10. Published 2022-08-25.

How severe is CVE-2022-20921?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Cisco Aci_multi-site_orchestrator

CVE-2022-20921

A vulnerability in the API implementation of Cisco ACI Multi-Site Orchestrator (MSO) could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability is due to improper authorization on specific…

EPSS: 0.010 (59.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Aci_multi-site_orchestrator
Cisco Aci Multi-site Orchestrator Software — versions n/a

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2022-20921?: CVE-2022-20921 is a high-severity vulnerability in Cisco Aci_multi-site_orchestrator, classified under Improper Authorization. CVSS score: 8.8/10. Published 2022-08-25.
How severe is CVE-2022-20921?: High severity. CVSS v3 base score is 8.8 out of 10.