Lucene search
HistoryApr 15, 2022 - 3:15 p.m.
CVE-2022-20724
cisco
iox
application hosting
vulnerabilities
arbitrary commands
code execution
unauthenticated installation
xss attack
nvd
cve-2022-20724
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
6.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
40.5%
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.
Affected configurations
Node
ciscocgr1000_compute_module
ORciscoic3000_industrial_compute_gateway
ORciscoiosMatch15.2\(5\)e1
ORciscoiosMatch15.2\(5\)e2c
ORciscoiosMatch15.2\(6\)e0a
ORciscoiosMatch15.2\(6\)e1
ORciscoiosMatch15.2\(6\)e2a
ORciscoiosMatch15.2\(7\)e
ORciscoiosMatch15.2\(7\)e0b
ORciscoiosMatch15.2\(7\)e0s
ORciscoiosMatch15.6\(1\)t1
ORciscoiosMatch15.6\(1\)t2
ORciscoiosMatch15.6\(1\)t3
ORciscoiosMatch15.6\(2\)t
ORciscoiosMatch15.6\(2\)t0a
ORciscoiosMatch15.6\(2\)t1
ORciscoiosMatch15.6\(2\)t2
ORciscoiosMatch15.6\(2\)t3
ORciscoiosMatch15.6\(3\)m
ORciscoiosMatch15.6\(3\)m0a
ORciscoiosMatch15.6\(3\)m1
ORciscoiosMatch15.6\(3\)m1a
ORciscoiosMatch15.6\(3\)m1b
ORciscoiosMatch15.6\(3\)m2
ORciscoiosMatch15.6\(3\)m2a
ORciscoiosMatch15.6\(3\)m3
ORciscoiosMatch15.6\(3\)m3a
ORciscoiosMatch15.6\(3\)m4
ORciscoiosMatch15.6\(3\)m5
ORciscoiosMatch15.6\(3\)m6
ORciscoiosMatch15.6\(3\)m6a
ORciscoiosMatch15.6\(3\)m6b
ORciscoiosMatch15.6\(3\)m7
ORciscoiosMatch15.6\(3\)m8
ORciscoiosMatch15.6\(3\)m9
ORciscoiosMatch15.7\(3\)m
ORciscoiosMatch15.7\(3\)m0a
ORciscoiosMatch15.7\(3\)m1
ORciscoiosMatch15.7\(3\)m2
ORciscoiosMatch15.7\(3\)m3
ORciscoiosMatch15.7\(3\)m4
ORciscoiosMatch15.7\(3\)m4a
ORciscoiosMatch15.7\(3\)m4b
ORciscoiosMatch15.7\(3\)m5
ORciscoiosMatch15.7\(3\)m6
ORciscoiosMatch15.7\(3\)m7
ORciscoiosMatch15.7\(3\)m8
ORciscoiosMatch15.7\(3\)m9
ORciscoiosMatch15.8\(3\)m
ORciscoiosMatch15.8\(3\)m0a
ORciscoiosMatch15.8\(3\)m0b
ORciscoiosMatch15.8\(3\)m1
ORciscoiosMatch15.8\(3\)m1a
ORciscoiosMatch15.8\(3\)m2
ORciscoiosMatch15.8\(3\)m2a
ORciscoiosMatch15.8\(3\)m3
ORciscoiosMatch15.8\(3\)m3a
ORciscoiosMatch15.8\(3\)m3b
ORciscoiosMatch15.8\(3\)m4
ORciscoiosMatch15.8\(3\)m5
ORciscoiosMatch15.8\(3\)m6
ORciscoiosMatch15.8\(3\)m7
ORciscoiosMatch15.9\(3\)m
ORciscoiosMatch15.9\(3\)m0a
ORciscoiosMatch15.9\(3\)m1
ORciscoiosMatch15.9\(3\)m2
ORciscoiosMatch15.9\(3\)m2a
ORciscoiosMatch15.9\(3\)m3
ORciscoiosMatch15.9\(3\)m3a
ORciscoiosMatch15.9\(3\)m3b
ORciscoiosMatch15.9\(3\)m4
ORciscoiosMatch15.9\(3\)m4a
ORciscoios_xeMatch16.3.1
ORciscoios_xeMatch16.3.1a
ORciscoios_xeMatch16.3.2
ORciscoios_xeMatch16.3.3
ORciscoios_xeMatch16.3.4
ORciscoios_xeMatch16.3.5
ORciscoios_xeMatch16.3.5b
ORciscoios_xeMatch16.3.6
ORciscoios_xeMatch16.3.7
ORciscoios_xeMatch16.3.8
ORciscoios_xeMatch16.3.9
ORciscoios_xeMatch16.3.10
ORciscoios_xeMatch16.3.11
ORciscoios_xeMatch16.4.1
ORciscoios_xeMatch16.4.2
ORciscoios_xeMatch16.4.3
ORciscoios_xeMatch16.5.1
ORciscoios_xeMatch16.5.1a
ORciscoios_xeMatch16.5.1b
ORciscoios_xeMatch16.5.2
ORciscoios_xeMatch16.5.3
ORciscoios_xeMatch16.6.1
ORciscoios_xeMatch16.6.2
ORciscoios_xeMatch16.6.3
ORciscoios_xeMatch16.6.4
ORciscoios_xeMatch16.6.4a
ORciscoios_xeMatch16.6.4s
ORciscoios_xeMatch16.6.5
ORciscoios_xeMatch16.6.5a
ORciscoios_xeMatch16.6.5b
ORciscoios_xeMatch16.6.6
ORciscoios_xeMatch16.6.7
ORciscoios_xeMatch16.6.7a
ORciscoios_xeMatch16.6.8
ORciscoios_xeMatch16.6.9
ORciscoios_xeMatch16.6.10
ORciscoios_xeMatch16.7.1
ORciscoios_xeMatch16.7.1a
ORciscoios_xeMatch16.7.1b
ORciscoios_xeMatch16.7.2
ORciscoios_xeMatch16.7.3
ORciscoios_xeMatch16.7.4
ORciscoios_xeMatch16.8.1
ORciscoios_xeMatch16.8.1a
ORciscoios_xeMatch16.8.1b
ORciscoios_xeMatch16.8.1c
ORciscoios_xeMatch16.8.1d
ORciscoios_xeMatch16.8.1e
ORciscoios_xeMatch16.8.1s
ORciscoios_xeMatch16.8.2
ORciscoios_xeMatch16.8.3
ORciscoios_xeMatch16.9.1
ORciscoios_xeMatch16.9.1a
ORciscoios_xeMatch16.9.1b
ORciscoios_xeMatch16.9.1c
ORciscoios_xeMatch16.9.1d
ORciscoios_xeMatch16.9.1s
ORciscoios_xeMatch16.9.2
ORciscoios_xeMatch16.9.2a
ORciscoios_xeMatch16.9.2s
ORciscoios_xeMatch16.9.3
ORciscoios_xeMatch16.9.3a
ORciscoios_xeMatch16.9.3h
ORciscoios_xeMatch16.9.3s
ORciscoios_xeMatch16.9.4
ORciscoios_xeMatch16.9.4c
ORciscoios_xeMatch16.9.5
ORciscoios_xeMatch16.9.5f
ORciscoios_xeMatch16.9.6
ORciscoios_xeMatch16.9.7
ORciscoios_xeMatch16.9.8
ORciscoios_xeMatch16.10.1
ORciscoios_xeMatch16.10.1a
ORciscoios_xeMatch16.10.1b
ORciscoios_xeMatch16.10.1c
ORciscoios_xeMatch16.10.1d
ORciscoios_xeMatch16.10.1e
ORciscoios_xeMatch16.10.1f
ORciscoios_xeMatch16.10.1g
ORciscoios_xeMatch16.10.1s
ORciscoios_xeMatch16.10.2
ORciscoios_xeMatch16.10.3
ORciscoios_xeMatch16.11.1
ORciscoios_xeMatch16.11.1a
ORciscoios_xeMatch16.11.1b
ORciscoios_xeMatch16.11.1c
ORciscoios_xeMatch16.11.1s
ORciscoios_xeMatch16.11.2
ORciscoios_xeMatch16.12.1
ORciscoios_xeMatch16.12.1a
ORciscoios_xeMatch16.12.1c
ORciscoios_xeMatch16.12.1s
ORciscoios_xeMatch16.12.1t
ORciscoios_xeMatch16.12.1w
ORciscoios_xeMatch16.12.1x
ORciscoios_xeMatch16.12.1y
ORciscoios_xeMatch16.12.2
ORciscoios_xeMatch16.12.2a
ORciscoios_xeMatch16.12.2s
ORciscoios_xeMatch16.12.2t
ORciscoios_xeMatch16.12.3
ORciscoios_xeMatch16.12.3a
ORciscoios_xeMatch16.12.3s
ORciscoios_xeMatch16.12.4
ORciscoios_xeMatch16.12.4a
ORciscoios_xeMatch16.12.5
ORciscoios_xeMatch16.12.5a
ORciscoios_xeMatch17.1.1
ORciscoios_xeMatch17.1.1a
ORciscoios_xeMatch17.1.1s
ORciscoios_xeMatch17.1.1t
ORciscoios_xeMatch17.1.2
ORciscoios_xeMatch17.1.3
ORciscoios_xeMatch17.2.1
ORciscoios_xeMatch17.2.1a
ORciscoios_xeMatch17.2.1r
ORciscoios_xeMatch17.2.1v
ORciscoios_xeMatch17.2.2
ORciscoios_xeMatch17.2.3
ORciscoios_xeMatch17.3.1
ORciscoios_xeMatch17.3.1a
ORciscoios_xeMatch17.3.1w
ORciscoios_xeMatch17.3.1x
ORciscoios_xeMatch17.3.1z
ORciscoios_xeMatch17.3.2
ORciscoios_xeMatch17.3.2a
ORciscoios_xeMatch17.3.3
ORciscoios_xeMatch17.3.3a
ORciscoios_xeMatch17.3.4
ORciscoios_xeMatch17.3.4a
ORciscoios_xeMatch17.3.4b
ORciscoios_xeMatch17.3.4c
ORciscoios_xeMatch17.4.1
ORciscoios_xeMatch17.4.1a
ORciscoios_xeMatch17.4.1b
ORciscoios_xeMatch17.4.1c
ORciscoios_xeMatch17.4.2
ORciscoios_xeMatch17.4.2a
ORciscoios_xeMatch17.5.1
ORciscoios_xeMatch17.5.1a
ORciscoios_xeMatch17.6.1
ORciscoios_xeMatch17.6.1a
CNA Affected
[
{
"product": "Cisco IOS ",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]Related
cvelist
cvelist
CVE-2022-20724 Cisco IOx Application Hosting Environment Vulnerabilities
2022-04-13 00:00:00
prion
prion
Cross site scripting
2022-04-15 15:15:00
nvd
nvd
CVE-2022-20724
2022-04-15 15:15:13
nessus
nessus
cisco
cisco
Cisco IOx Application Hosting Environment Vulnerabilities
2022-04-13 16:00:00
7.6 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
6.1 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
40.5%
Related for CVE-2022-20724