Lucene search
CiscoCVE-2022-20727HistoryApr 15, 2022 - 3:15 p.m.
CVE-2022-20727
2022-04-1515:15:13
CWE-22
cisco
web.nvd.nist.gov
74
cve-2022-20727
cisco
iox
application hosting
vulnerabilities
arbitrary commands
arbitrary code
authentication bypass
xss
nvd
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
High
EPSS
0
Percentile
9.9%
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.
Affected configurations
Node
ciscocgr1000_compute_moduleRange<1.15.0.1
ORciscoic3000_industrial_compute_gatewayRange<1.4.1
ORciscoir510_operating_systemRange<6.5.9
ORciscoiosMatch15.2\(5\)e1
ORciscoiosMatch15.2\(6\)e0a
ORciscoiosMatch15.2\(6\)e1
ORciscoiosMatch15.2\(6\)e2a
ORciscoiosMatch15.2\(7\)e
ORciscoiosMatch15.2\(7\)e0b
ORciscoiosMatch15.2\(7\)e0s
ORciscoiosMatch15.6\(1\)t1
ORciscoiosMatch15.6\(1\)t2
ORciscoiosMatch15.6\(1\)t3
ORciscoiosMatch15.6\(2\)t
ORciscoiosMatch15.6\(2\)t0a
ORciscoiosMatch15.6\(2\)t1
ORciscoiosMatch15.6\(2\)t2
ORciscoiosMatch15.6\(2\)t3
ORciscoiosMatch15.6\(3\)m
ORciscoiosMatch15.6\(3\)m0a
ORciscoiosMatch15.6\(3\)m1
ORciscoiosMatch15.6\(3\)m1a
ORciscoiosMatch15.6\(3\)m1b
ORciscoiosMatch15.6\(3\)m2
ORciscoiosMatch15.6\(3\)m2a
ORciscoiosMatch15.6\(3\)m3
ORciscoiosMatch15.6\(3\)m3a
ORciscoiosMatch15.6\(3\)m4
ORciscoiosMatch15.6\(3\)m5
ORciscoiosMatch15.6\(3\)m6
ORciscoiosMatch15.6\(3\)m6a
ORciscoiosMatch15.6\(3\)m6b
ORciscoiosMatch15.6\(3\)m7
ORciscoiosMatch15.6\(3\)m8
ORciscoiosMatch15.6\(3\)m9
ORciscoiosMatch15.7\(3\)m
ORciscoiosMatch15.7\(3\)m0a
ORciscoiosMatch15.7\(3\)m1
ORciscoiosMatch15.7\(3\)m2
ORciscoiosMatch15.7\(3\)m3
ORciscoiosMatch15.7\(3\)m4
ORciscoiosMatch15.7\(3\)m4a
ORciscoiosMatch15.7\(3\)m4b
ORciscoiosMatch15.7\(3\)m5
ORciscoiosMatch15.7\(3\)m6
ORciscoiosMatch15.7\(3\)m7
ORciscoiosMatch15.7\(3\)m8
ORciscoiosMatch15.7\(3\)m9
ORciscoiosMatch15.8\(3\)m
ORciscoiosMatch15.8\(3\)m0a
ORciscoiosMatch15.8\(3\)m0b
ORciscoiosMatch15.8\(3\)m1
ORciscoiosMatch15.8\(3\)m1a
ORciscoiosMatch15.8\(3\)m2
ORciscoiosMatch15.8\(3\)m2a
ORciscoiosMatch15.8\(3\)m3
ORciscoiosMatch15.8\(3\)m3a
ORciscoiosMatch15.8\(3\)m3b
ORciscoiosMatch15.8\(3\)m4
ORciscoiosMatch15.8\(3\)m5
ORciscoiosMatch15.8\(3\)m6
ORciscoiosMatch15.8\(3\)m7
ORciscoiosMatch15.9\(3\)m
ORciscoiosMatch15.9\(3\)m0a
ORciscoiosMatch15.9\(3\)m1
ORciscoiosMatch15.9\(3\)m2
ORciscoiosMatch15.9\(3\)m2a
ORciscoiosMatch15.9\(3\)m3
ORciscoiosMatch15.9\(3\)m3a
ORciscoiosMatch15.9\(3\)m3b
ORciscoiosMatch15.9\(3\)m4
ORciscoiosMatch15.9\(3\)m4a
ORciscoios_xeMatch16.3.1
ORciscoios_xeMatch16.3.1a
ORciscoios_xeMatch16.3.2
ORciscoios_xeMatch16.3.3
ORciscoios_xeMatch16.3.4
ORciscoios_xeMatch16.3.5
ORciscoios_xeMatch16.3.5b
ORciscoios_xeMatch16.3.6
ORciscoios_xeMatch16.3.7
ORciscoios_xeMatch16.3.8
ORciscoios_xeMatch16.3.9
ORciscoios_xeMatch16.3.10
ORciscoios_xeMatch16.3.11
ORciscoios_xeMatch16.4.1
ORciscoios_xeMatch16.4.2
ORciscoios_xeMatch16.4.3
ORciscoios_xeMatch16.5.1
ORciscoios_xeMatch16.5.1a
ORciscoios_xeMatch16.5.1b
ORciscoios_xeMatch16.5.2
ORciscoios_xeMatch16.5.3
ORciscoios_xeMatch16.6.1
ORciscoios_xeMatch16.6.2
ORciscoios_xeMatch16.6.3
ORciscoios_xeMatch16.6.4
ORciscoios_xeMatch16.6.4a
ORciscoios_xeMatch16.6.4s
ORciscoios_xeMatch16.6.5
ORciscoios_xeMatch16.6.5a
ORciscoios_xeMatch16.6.5b
ORciscoios_xeMatch16.6.6
ORciscoios_xeMatch16.6.7
ORciscoios_xeMatch16.6.7a
ORciscoios_xeMatch16.6.8
ORciscoios_xeMatch16.6.9
ORciscoios_xeMatch16.6.10
ORciscoios_xeMatch16.7.1
ORciscoios_xeMatch16.7.1a
ORciscoios_xeMatch16.7.1b
ORciscoios_xeMatch16.7.2
ORciscoios_xeMatch16.7.3
ORciscoios_xeMatch16.7.4
ORciscoios_xeMatch16.8.1
ORciscoios_xeMatch16.8.1a
ORciscoios_xeMatch16.8.1b
ORciscoios_xeMatch16.8.1c
ORciscoios_xeMatch16.8.1d
ORciscoios_xeMatch16.8.1e
ORciscoios_xeMatch16.8.1s
ORciscoios_xeMatch16.8.2
ORciscoios_xeMatch16.8.3
ORciscoios_xeMatch16.9.1
ORciscoios_xeMatch16.9.1a
ORciscoios_xeMatch16.9.1b
ORciscoios_xeMatch16.9.1c
ORciscoios_xeMatch16.9.1d
ORciscoios_xeMatch16.9.1s
ORciscoios_xeMatch16.9.2
ORciscoios_xeMatch16.9.2a
ORciscoios_xeMatch16.9.2s
ORciscoios_xeMatch16.9.3
ORciscoios_xeMatch16.9.3a
ORciscoios_xeMatch16.9.3h
ORciscoios_xeMatch16.9.3s
ORciscoios_xeMatch16.9.4
ORciscoios_xeMatch16.9.4c
ORciscoios_xeMatch16.9.5
ORciscoios_xeMatch16.9.5f
ORciscoios_xeMatch16.9.6
ORciscoios_xeMatch16.9.7
ORciscoios_xeMatch16.9.8
ORciscoios_xeMatch16.10.1
ORciscoios_xeMatch16.10.1a
ORciscoios_xeMatch16.10.1b
ORciscoios_xeMatch16.10.1c
ORciscoios_xeMatch16.10.1d
ORciscoios_xeMatch16.10.1e
ORciscoios_xeMatch16.10.1f
ORciscoios_xeMatch16.10.1g
ORciscoios_xeMatch16.10.1s
ORciscoios_xeMatch16.10.2
ORciscoios_xeMatch16.10.3
ORciscoios_xeMatch16.11.1
ORciscoios_xeMatch16.11.1a
ORciscoios_xeMatch16.11.1b
ORciscoios_xeMatch16.11.1c
ORciscoios_xeMatch16.11.1s
ORciscoios_xeMatch16.11.2
ORciscoios_xeMatch16.12.1
ORciscoios_xeMatch16.12.1a
ORciscoios_xeMatch16.12.1c
ORciscoios_xeMatch16.12.1s
ORciscoios_xeMatch16.12.1t
ORciscoios_xeMatch16.12.1w
ORciscoios_xeMatch16.12.1x
ORciscoios_xeMatch16.12.1y
ORciscoios_xeMatch16.12.2
ORciscoios_xeMatch16.12.2a
ORciscoios_xeMatch16.12.2s
ORciscoios_xeMatch16.12.2t
ORciscoios_xeMatch16.12.3
ORciscoios_xeMatch16.12.3a
ORciscoios_xeMatch16.12.3s
ORciscoios_xeMatch16.12.4
ORciscoios_xeMatch16.12.4a
ORciscoios_xeMatch16.12.5
ORciscoios_xeMatch16.12.5a
ORciscoios_xeMatch17.1.1
ORciscoios_xeMatch17.1.1a
ORciscoios_xeMatch17.1.1s
ORciscoios_xeMatch17.1.1t
ORciscoios_xeMatch17.1.2
ORciscoios_xeMatch17.1.3
ORciscoios_xeMatch17.2.1
ORciscoios_xeMatch17.2.1a
ORciscoios_xeMatch17.2.1r
ORciscoios_xeMatch17.2.1v
ORciscoios_xeMatch17.2.2
ORciscoios_xeMatch17.2.3
ORciscoios_xeMatch17.3.1
ORciscoios_xeMatch17.3.1a
ORciscoios_xeMatch17.3.1w
ORciscoios_xeMatch17.3.1x
ORciscoios_xeMatch17.3.1z
ORciscoios_xeMatch17.3.2
ORciscoios_xeMatch17.3.2a
ORciscoios_xeMatch17.3.3
ORciscoios_xeMatch17.3.3a
ORciscoios_xeMatch17.3.4
ORciscoios_xeMatch17.3.4a
ORciscoios_xeMatch17.3.4b
ORciscoios_xeMatch17.3.4c
ORciscoios_xeMatch17.4.1
ORciscoios_xeMatch17.4.1a
ORciscoios_xeMatch17.4.1b
ORciscoios_xeMatch17.4.1c
ORciscoios_xeMatch17.4.2
ORciscoios_xeMatch17.4.2a
ORciscoios_xeMatch17.5.1
ORciscoios_xeMatch17.5.1a
ORciscoios_xeMatch17.6.1
ORciscoios_xeMatch17.6.1a
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | cgr1000_compute_module | * | cpe:2.3:a:cisco:cgr1000_compute_module:*:*:*:*:*:*:*:* |
| cisco | ic3000_industrial_compute_gateway | * | cpe:2.3:a:cisco:ic3000_industrial_compute_gateway:*:*:*:*:*:*:*:* |
| cisco | ir510_operating_system | * | cpe:2.3:a:cisco:ir510_operating_system:*:*:*:*:*:*:*:* |
| cisco | ios | 15.2(5)e1 | cpe:2.3:o:cisco:ios:15.2\(5\)e1:*:*:*:*:*:*:* |
| cisco | ios | 15.2(6)e0a | cpe:2.3:o:cisco:ios:15.2\(6\)e0a:*:*:*:*:*:*:* |
| cisco | ios | 15.2(6)e1 | cpe:2.3:o:cisco:ios:15.2\(6\)e1:*:*:*:*:*:*:* |
| cisco | ios | 15.2(6)e2a | cpe:2.3:o:cisco:ios:15.2\(6\)e2a:*:*:*:*:*:*:* |
| cisco | ios | 15.2(7)e | cpe:2.3:o:cisco:ios:15.2\(7\)e:*:*:*:*:*:*:* |
| cisco | ios | 15.2(7)e0b | cpe:2.3:o:cisco:ios:15.2\(7\)e0b:*:*:*:*:*:*:* |
| cisco | ios | 15.2(7)e0s | cpe:2.3:o:cisco:ios:15.2\(7\)e0s:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "Cisco IOS",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]Related
cvelist
cvelist
CVE-2022-20727 Cisco IOx Application Hosting Environment Vulnerabilities
2022-04-15 14:20:48
nvd
nvd
CVE-2022-20727
2022-04-15 15:15:13
prion
prion
Cross site scripting
2022-04-15 15:15:00
nessus
nessus
cisco
cisco
Cisco IOx Application Hosting Environment Vulnerabilities
2022-04-13 16:00:00
CVSS2
7.2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
6.6
Confidence
High
EPSS
0
Percentile
9.9%
Related for CVE-2022-20727