CVE-2022-20726

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 15-04-2022 05:15

Last modified: - 22-04-2022 10:55

Total changes: - 2

Description

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

None

Confidentiality

None

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

7.5

Base score

3.9

3.6

Exploitability score

Impact score

Verification logic

vendor=cisco AND product=cgr1000_compute_module

vendor=cisco AND product=ic3000_industrial_compute_gateway

vendor=cisco AND product=ios

vendor=cisco AND product=ios AND version=15.2\(5\)e1

vendor=cisco AND product=ios AND version=15.2\(5\)e2c

vendor=cisco AND product=ios AND version=15.2\(6\)e0a

vendor=cisco AND product=ios AND version=15.2\(6\)e1

vendor=cisco AND product=ios AND version=15.2\(6\)e2a

vendor=cisco AND product=ios AND version=15.2\(7\)e

vendor=cisco AND product=ios AND version=15.2\(7\)e0b

vendor=cisco AND product=ios AND version=15.2\(7\)e0s

vendor=cisco AND product=ios AND version=15.6\(1\)t1

vendor=cisco AND product=ios AND version=15.6\(1\)t2

vendor=cisco AND product=ios AND version=15.6\(1\)t3

vendor=cisco AND product=ios AND version=15.6\(2\)t

vendor=cisco AND product=ios AND version=15.6\(2\)t1

vendor=cisco AND product=ios AND version=15.6\(2\)t2

vendor=cisco AND product=ios AND version=15.6\(2\)t3

vendor=cisco AND product=ios AND version=15.6\(3\)m

vendor=cisco AND product=ios AND version=15.6\(3\)m0a

vendor=cisco AND product=ios AND version=15.6\(3\)m1

vendor=cisco AND product=ios AND version=15.6\(3\)m1b

vendor=cisco AND product=ios AND version=15.6\(3\)m2

vendor=cisco AND product=ios AND version=15.6\(3\)m3

vendor=cisco AND product=ios AND version=15.6\(3\)m3a

vendor=cisco AND product=ios AND version=15.6\(3\)m4

vendor=cisco AND product=ios AND version=15.6\(3\)m5

vendor=cisco AND product=ios AND version=15.6\(3\)m6

vendor=cisco AND product=ios AND version=15.6\(3\)m6a

vendor=cisco AND product=ios AND version=15.6\(3\)m6b

vendor=cisco AND product=ios AND version=15.6\(3\)m7

vendor=cisco AND product=ios AND version=15.6\(3\)m8

vendor=cisco AND product=ios AND version=15.7\(3\)m

vendor=cisco AND product=ios AND version=15.7\(3\)m0a

vendor=cisco AND product=ios AND version=15.7\(3\)m1

vendor=cisco AND product=ios AND version=15.7\(3\)m2

vendor=cisco AND product=ios AND version=15.7\(3\)m3

vendor=cisco AND product=ios AND version=15.7\(3\)m4

vendor=cisco AND product=ios AND version=15.7\(3\)m4a

vendor=cisco AND product=ios AND version=15.7\(3\)m4b

vendor=cisco AND product=ios AND version=15.7\(3\)m5

vendor=cisco AND product=ios AND version=15.7\(3\)m6

vendor=cisco AND product=ios AND version=15.8\(3\)m

vendor=cisco AND product=ios AND version=15.8\(3\)m0a

vendor=cisco AND product=ios AND version=15.8\(3\)m1

vendor=cisco AND product=ios AND version=15.8\(3\)m2

vendor=cisco AND product=ios AND version=15.8\(3\)m2a

vendor=cisco AND product=ios AND version=15.8\(3\)m3

vendor=cisco AND product=ios AND version=15.8\(3\)m4

vendor=cisco AND product=ios AND version=15.8\(3\)m5

vendor=cisco AND product=ios AND version=15.8\(3\)m6

vendor=cisco AND product=ios AND version=15.8\(3\)m7

vendor=cisco AND product=ios AND version=15.9\(3\)m

vendor=cisco AND product=ios AND version=15.9\(3\)m1

vendor=cisco AND product=ios AND version=15.9\(3\)m2

vendor=cisco AND product=ios AND version=15.9\(3\)m2a

vendor=cisco AND product=ios AND version=15.9\(3\)m3

vendor=cisco AND product=ios AND version=15.9\(3\)m4

vendor=cisco AND product=ios AND version=15.9\(3\)m4a

Reference

20220413 Cisco IOx Application Hosting Environment Vulnerabilities-Vendor Advisory

Keywords

CVE-2022-20726

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-20726

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures