CVE-2022-20723 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20724

CVE-2022-20724 is a race condition vulnerability in Cisco IOx Application Hosting Environment affecting multiple Cisco platforms. The issue can allow an unauthenticated remote attacker to bypass authentication and impersonate another authenticated user session. The condition arises from timing/sy...

CVE-2022-20724 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20725 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20725 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20725

Cisco IOx Application Hosting Environment on multiple Cisco platforms contains CVE-2022-20725, a cross-site scripting vulnerability in the web-based Local Manager interface. The issue arises from insufficient sanitization/validation of parameters and inputs in the IOx hosting environment (alongsi...

CVE-2022-20726

The CVE-2022-20726 issue concerns Cisco IOx Application Hosting Environment across multiple Cisco platforms. The connected sources provide concrete details: a denial-of-service vulnerability in the IOx Web server is caused by insufficient error handling of socket operations, permitting an unauthe...

CVE-2022-20726 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20726 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20727 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20727

Cisco IOx Application Hosting Environment vulnerability CVE-2022-20727 involves an in-application privilege-escalation flaw. The authenticated, local attacker can exploit improper input validation to modify application content while loading and gain root privileges on the underlying host OS. Affe...

CVE-2022-20677 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20677 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20677

CVE-2022-20677 affects Cisco IOx Application Hosting Environment (Cisco IOx) within Cisco IOS XE/IOx stack. Reports describe an authenticated, local attacker escalating privileges to root by exploiting weaknesses in the IOx hosting environment; broader impact includes command injection and potent...

CVE-2022-20718 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20718

CVE-2022-20718 concerns Cisco IOx Application Hosting Environment vulnerabilities affecting Cisco IOx on multiple platforms (IOS/IOS XE). Reported issues include parameter injection (incomplete sanitization of application package parameters) that can allow an authenticated remote attacker to exec...

CVE-2022-20719 Cisco IOx Application Hosting Environment Vulnerabilities

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...

CVE-2022-20719

Cisco IOx Application Hosting Environment vulnerabilities (CVE-2022-20719 and related CVEs) affect multiple Cisco platforms. The issues stem from incomplete sanitization of application-package parameters and insufficient path validation, enabling: (1) authenticated remote attackers to inject comm...

Cisco Iox path traversal vulnerability

Cisco Iox is a secure development environment from Cisco that combines Cisco IOS and Linux OS for secure network connectivity and the development of IOT applications. file located on the base host file system...

Cisco Iox Denial of Service Vulnerability

Cisco Iox is a secure development environment from Cisco that combines Cisco IOS and Linux OS for secure network connectivity and development of IOT applications.A denial-of-service vulnerability exists in Cisco Iox, which can be exploited by an attacker to cause a DoS condition by sending a...