CVE-2022-20726

The CVE-2022-20726 issue concerns Cisco IOx Application Hosting Environment across multiple Cisco platforms. The connected sources provide concrete details: a denial-of-service vulnerability in the IOx Web server is caused by insufficient error handling of socket operations, permitting an unauthe...

CVE-2022-20726 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20727

Cisco IOx Application Hosting Environment vulnerability CVE-2022-20727 involves an in-application privilege-escalation flaw. The authenticated, local attacker can exploit improper input validation to modify application content while loading and gain root privileges on the underlying host OS. Affe...

CVE-2022-20677 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20677

CVE-2022-20677 affects Cisco IOx Application Hosting Environment (Cisco IOx) within Cisco IOS XE/IOx stack. Reports describe an authenticated, local attacker escalating privileges to root by exploiting weaknesses in the IOx hosting environment; broader impact includes command injection and potent...

CVE-2022-20677 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20718

CVE-2022-20718 concerns Cisco IOx Application Hosting Environment vulnerabilities affecting Cisco IOx on multiple platforms (IOS/IOS XE). Reported issues include parameter injection (incomplete sanitization of application package parameters) that can allow an authenticated remote attacker to exec...

CVE-2022-20718 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20719

Cisco IOx Application Hosting Environment vulnerabilities (CVE-2022-20719 and related CVEs) affect multiple Cisco platforms. The issues stem from incomplete sanitization of application-package parameters and insufficient path validation, enabling: (1) authenticated remote attackers to inject comm...

CVE-2022-20719 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20677: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20727: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20723: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20725: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20724: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20719: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20718: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20722: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20721: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20720: Improper Limitation of a Pathname to a Restricted Directory

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...