CVE-2022-20677

🗓️ 15 Apr 2022 14:16:46Reported by ciscoType

Multiple vulnerabilities in Cisco IOx application hosting environment allowing arbitrary commands injection, code execution, unauthenticated app installation, and XSS attack.

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-20677	13 Apr 202216:00	–	attackerkb
Cisco	Cisco IOx Application Hosting Environment Vulnerabilities	13 Apr 202216:00	–	cisco
Tenable Nessus	Cisco IOS XE Software IOx Application Hosting Environment (cisco-sa-iox-yuXQ6hFj)	22 Apr 202200:00	–	nessus
CNNVD	Cisco IOS XE 加密问题漏洞	13 Apr 202200:00	–	cnnvd
CNVD	Cisco IOS XE Software Elevation of Privilege Vulnerability (CNVD-2022-46473)	28 Apr 202200:00	–	cnvd
Cvelist	CVE-2022-20677 Cisco IOx Application Hosting Environment Vulnerabilities	15 Apr 202214:16	–	cvelist
EUVD	EUVD-2022-25927	3 Oct 202520:07	–	euvd
NVD	CVE-2022-20677	15 Apr 202215:15	–	nvd
OSV	CVE-2022-20677	15 Apr 202215:15	–	osv
Prion	Cross site scripting	15 Apr 202215:15	–	prion

NVD

Node

cisco iosMatch17.6.1

AND

cisco 1100-4g_integrated_services_routerMatch-

cisco 1100-6g_integrated_services_routerMatch-

cisco 1101_integrated_services_routerMatch-

cisco 1109_integrated_services_routerMatch-

cisco 1111x_integrated_services_routerMatch-

cisco 111x_integrated_services_routerMatch-

cisco 1120_integrated_services_routerMatch-

cisco 1131_integrated_services_routerMatch-

cisco 1160_integrated_services_routerMatch-

cisco 4221_integrated_services_routerMatch-

cisco 8101-32fhMatch-

cisco 8101-32hMatch-

cisco 8102-64hMatch-

cisco 8201Match-

cisco 8201-32fhMatch-

cisco 8202Match-

cisco 8800Match-

cisco asr_1001-xMatch-

cisco asr_1002-hxMatch-

cisco asr_1006-xMatch-

cisco asr_1009-xMatch-

cisco asr_900Match-

cisco asr_9000v-v2Match-

cisco asr_9001Match-

cisco asr_9006Match-

cisco asr_9010Match-

cisco asr_9901Match-

cisco asr_9902Match-

cisco asr_9903Match-

cisco asr_9904Match-

cisco asr_9906Match-

cisco asr_9910Match-

cisco asr_9912Match-

cisco asr_9922Match-

cisco catalyst_3650Match-

cisco catalyst_3850Match-

cisco catalyst_8200Match-

cisco catalyst_8300Match-

cisco catalyst_8500Match-

cisco catalyst_8500lMatch-

cisco catalyst_9200Match-

cisco catalyst_9300Match-

cisco catalyst_9400Match-

cisco catalyst_9500Match-

cisco catalyst_9500hMatch-

cisco catalyst_9600Match-

cisco catalyst_9800Match-

cisco catalyst_9800-40Match-

cisco catalyst_9800-80Match-

cisco catalyst_9800-clMatch-

cisco catalyst_9800-lMatch-

cisco catalyst_cg418-eMatch-

cisco catalyst_cg522-eMatch-

cisco catalyst_ess9300Match-

cisco catalyst_ie3200Match-

cisco catalyst_ie3300Match-

cisco catalyst_ie3400Match-

cisco catalyst_ie9300Match-

cisco cloud_services_router_1000vMatch-

cisco esr3300Match-

cisco esr6300Match-

[
  {
    "product": "Cisco IOS",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-yuXQ6hFj

21 Nov 2024 06:43Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.5 - 6.7

CVSS 27.2

EPSS0.0016

SSVC