CVE-2022-20797

CVE-2022-20797 is a critical command injection vulnerability affecting the web-based management interface of Cisco Secure Network Analytics (formerly Stealthwatch Enterprise). An authenticated, remote attacker can exploit insufficient input validation to execute arbitrary commands as an administrator on the underlying operating system. This vulnerability carries a CVSS score of 9.1 (CRITICAL) due to its network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, allowing for configuration changes or service disruption. While the EPSS score is low, indicating a lower probability of exploitation, there is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.