CVE-2022-20722

Cisco IOx Application Hosting Environment on multiple Cisco platforms contains multiple vulnerabilities (CVE-2022-20722 among others) related to insufficient path validation and other issues that could allow an attacker to inject commands, execute arbitrary code as root on the host OS, or perform...

CVE-2022-20722 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20723 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20723

CVE-2022-20723 concerns Cisco IOx Application Hosting Environment across Cisco IOS/IOS XE platforms. The issue group includes multiple vulnerabilities due to insufficient input sanitization and path validation in the IOx environment, enabling an authenticated remote attacker to inject commands, e...

CVE-2022-20724

CVE-2022-20724 is a race condition vulnerability in Cisco IOx Application Hosting Environment affecting multiple Cisco platforms. The issue can allow an unauthenticated remote attacker to bypass authentication and impersonate another authenticated user session. The condition arises from timing/sy...

CVE-2022-20724 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20725 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20725 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20725

Cisco IOx Application Hosting Environment on multiple Cisco platforms contains CVE-2022-20725, a cross-site scripting vulnerability in the web-based Local Manager interface. The issue arises from insufficient sanitization/validation of parameters and inputs in the IOx hosting environment (alongsi...

CVE-2022-20726

The CVE-2022-20726 issue concerns Cisco IOx Application Hosting Environment across multiple Cisco platforms. The connected sources provide concrete details: a denial-of-service vulnerability in the IOx Web server is caused by insufficient error handling of socket operations, permitting an unauthe...

CVE-2022-20726 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20726 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20727 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20727

Cisco IOx Application Hosting Environment vulnerability CVE-2022-20727 involves an in-application privilege-escalation flaw. The authenticated, local attacker can exploit improper input validation to modify application content while loading and gain root privileges on the underlying host OS. Affe...

CVE-2022-20677

CVE-2022-20677 affects Cisco IOx Application Hosting Environment (Cisco IOx) within Cisco IOS XE/IOx stack. Reports describe an authenticated, local attacker escalating privileges to root by exploiting weaknesses in the IOx hosting environment; broader impact includes command injection and potent...

CVE-2022-20677 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20677 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20718 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20718

CVE-2022-20718 concerns Cisco IOx Application Hosting Environment vulnerabilities affecting Cisco IOx on multiple platforms (IOS/IOS XE). Reported issues include parameter injection (incomplete sanitization of application package parameters) that can allow an authenticated remote attacker to exec...

CVE-2022-20719 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...