Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-20725


Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.


Published

2022-04-15T15:15:13.510

Last Modified

2024-11-21T06:43:25.270

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

6.8

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-22
  • Type: Primary
    CWE-79

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco cgr1000_compute_module * Yes
Application cisco ic3000_industrial_compute_gateway * Yes
Application cisco ir510_operating_system * Yes
Operating System cisco ios 15.2\(5\)e1 Yes
Operating System cisco ios 15.2\(5\)e2c Yes
Operating System cisco ios 15.2\(6\)e0a Yes
Operating System cisco ios 15.2\(6\)e1 Yes
Operating System cisco ios 15.2\(6\)e2a Yes
Operating System cisco ios 15.2\(7\)e Yes
Operating System cisco ios 15.2\(7\)e0b Yes
Operating System cisco ios 15.2\(7\)e0s Yes
Operating System cisco ios 15.6\(1\)t1 Yes
Operating System cisco ios 15.6\(1\)t2 Yes
Operating System cisco ios 15.6\(1\)t3 Yes
Operating System cisco ios 15.6\(2\)t Yes
Operating System cisco ios 15.6\(2\)t0a Yes
Operating System cisco ios 15.6\(2\)t1 Yes
Operating System cisco ios 15.6\(2\)t2 Yes
Operating System cisco ios 15.6\(2\)t3 Yes
Operating System cisco ios 15.6\(3\)m Yes
Operating System cisco ios 15.6\(3\)m0a Yes
Operating System cisco ios 15.6\(3\)m1 Yes
Operating System cisco ios 15.6\(3\)m1a Yes
Operating System cisco ios 15.6\(3\)m1b Yes
Operating System cisco ios 15.6\(3\)m2 Yes
Operating System cisco ios 15.6\(3\)m2a Yes
Operating System cisco ios 15.6\(3\)m3 Yes
Operating System cisco ios 15.6\(3\)m3a Yes
Operating System cisco ios 15.6\(3\)m4 Yes
Operating System cisco ios 15.6\(3\)m5 Yes
Operating System cisco ios 15.6\(3\)m6 Yes
Operating System cisco ios 15.6\(3\)m6a Yes
Operating System cisco ios 15.6\(3\)m6b Yes
Operating System cisco ios 15.6\(3\)m7 Yes
Operating System cisco ios 15.6\(3\)m8 Yes
Operating System cisco ios 15.6\(3\)m9 Yes
Operating System cisco ios 15.7\(3\)m Yes
Operating System cisco ios 15.7\(3\)m0a Yes
Operating System cisco ios 15.7\(3\)m1 Yes
Operating System cisco ios 15.7\(3\)m2 Yes
Operating System cisco ios 15.7\(3\)m3 Yes
Operating System cisco ios 15.7\(3\)m4 Yes
Operating System cisco ios 15.7\(3\)m4a Yes
Operating System cisco ios 15.7\(3\)m4b Yes
Operating System cisco ios 15.7\(3\)m5 Yes
Operating System cisco ios 15.7\(3\)m6 Yes
Operating System cisco ios 15.7\(3\)m7 Yes
Operating System cisco ios 15.7\(3\)m8 Yes
Operating System cisco ios 15.7\(3\)m9 Yes
Operating System cisco ios 15.8\(3\)m Yes
Operating System cisco ios 15.8\(3\)m0a Yes
Operating System cisco ios 15.8\(3\)m0b Yes
Operating System cisco ios 15.8\(3\)m1 Yes
Operating System cisco ios 15.8\(3\)m1a Yes
Operating System cisco ios 15.8\(3\)m2 Yes
Operating System cisco ios 15.8\(3\)m2a Yes
Operating System cisco ios 15.8\(3\)m3 Yes
Operating System cisco ios 15.8\(3\)m3a Yes
Operating System cisco ios 15.8\(3\)m3b Yes
Operating System cisco ios 15.8\(3\)m4 Yes
Operating System cisco ios 15.8\(3\)m5 Yes
Operating System cisco ios 15.8\(3\)m6 Yes
Operating System cisco ios 15.8\(3\)m7 Yes
Operating System cisco ios 15.9\(3\)m Yes
Operating System cisco ios 15.9\(3\)m0a Yes
Operating System cisco ios 15.9\(3\)m1 Yes
Operating System cisco ios 15.9\(3\)m2 Yes
Operating System cisco ios 15.9\(3\)m2a Yes
Operating System cisco ios 15.9\(3\)m3 Yes
Operating System cisco ios 15.9\(3\)m3a Yes
Operating System cisco ios 15.9\(3\)m3b Yes
Operating System cisco ios 15.9\(3\)m4 Yes
Operating System cisco ios 15.9\(3\)m4a Yes
Operating System cisco ios_xe 16.3.1 Yes
Operating System cisco ios_xe 16.3.1a Yes
Operating System cisco ios_xe 16.3.2 Yes
Operating System cisco ios_xe 16.3.3 Yes
Operating System cisco ios_xe 16.3.4 Yes
Operating System cisco ios_xe 16.3.5 Yes
Operating System cisco ios_xe 16.3.5b Yes
Operating System cisco ios_xe 16.3.6 Yes
Operating System cisco ios_xe 16.3.7 Yes
Operating System cisco ios_xe 16.3.8 Yes
Operating System cisco ios_xe 16.3.9 Yes
Operating System cisco ios_xe 16.3.10 Yes
Operating System cisco ios_xe 16.3.11 Yes
Operating System cisco ios_xe 16.4.1 Yes
Operating System cisco ios_xe 16.4.2 Yes
Operating System cisco ios_xe 16.4.3 Yes
Operating System cisco ios_xe 16.5.1 Yes
Operating System cisco ios_xe 16.5.1a Yes
Operating System cisco ios_xe 16.5.1b Yes
Operating System cisco ios_xe 16.5.2 Yes
Operating System cisco ios_xe 16.5.3 Yes
Operating System cisco ios_xe 16.6.1 Yes
Operating System cisco ios_xe 16.6.2 Yes
Operating System cisco ios_xe 16.6.3 Yes
Operating System cisco ios_xe 16.6.4 Yes
Operating System cisco ios_xe 16.6.4a Yes
Operating System cisco ios_xe 16.6.4s Yes
Operating System cisco ios_xe 16.6.5 Yes
Operating System cisco ios_xe 16.6.5a Yes
Operating System cisco ios_xe 16.6.5b Yes
Operating System cisco ios_xe 16.6.6 Yes
Operating System cisco ios_xe 16.6.7 Yes
Operating System cisco ios_xe 16.6.7a Yes
Operating System cisco ios_xe 16.6.8 Yes
Operating System cisco ios_xe 16.6.9 Yes
Operating System cisco ios_xe 16.6.10 Yes
Operating System cisco ios_xe 16.7.1 Yes
Operating System cisco ios_xe 16.7.1a Yes
Operating System cisco ios_xe 16.7.1b Yes
Operating System cisco ios_xe 16.7.2 Yes
Operating System cisco ios_xe 16.7.3 Yes
Operating System cisco ios_xe 16.7.4 Yes
Operating System cisco ios_xe 16.8.1 Yes
Operating System cisco ios_xe 16.8.1a Yes
Operating System cisco ios_xe 16.8.1b Yes
Operating System cisco ios_xe 16.8.1c Yes
Operating System cisco ios_xe 16.8.1d Yes
Operating System cisco ios_xe 16.8.1e Yes
Operating System cisco ios_xe 16.8.1s Yes
Operating System cisco ios_xe 16.8.2 Yes
Operating System cisco ios_xe 16.8.3 Yes
Operating System cisco ios_xe 16.9.1 Yes
Operating System cisco ios_xe 16.9.1a Yes
Operating System cisco ios_xe 16.9.1b Yes
Operating System cisco ios_xe 16.9.1c Yes
Operating System cisco ios_xe 16.9.1d Yes
Operating System cisco ios_xe 16.9.1s Yes
Operating System cisco ios_xe 16.9.2 Yes
Operating System cisco ios_xe 16.9.2a Yes
Operating System cisco ios_xe 16.9.2s Yes
Operating System cisco ios_xe 16.9.3 Yes
Operating System cisco ios_xe 16.9.3a Yes
Operating System cisco ios_xe 16.9.3h Yes
Operating System cisco ios_xe 16.9.3s Yes
Operating System cisco ios_xe 16.9.4 Yes
Operating System cisco ios_xe 16.9.4c Yes
Operating System cisco ios_xe 16.9.5 Yes
Operating System cisco ios_xe 16.9.5f Yes
Operating System cisco ios_xe 16.9.6 Yes
Operating System cisco ios_xe 16.9.7 Yes
Operating System cisco ios_xe 16.9.8 Yes
Operating System cisco ios_xe 16.10.1 Yes
Operating System cisco ios_xe 16.10.1a Yes
Operating System cisco ios_xe 16.10.1b Yes
Operating System cisco ios_xe 16.10.1c Yes
Operating System cisco ios_xe 16.10.1d Yes
Operating System cisco ios_xe 16.10.1e Yes
Operating System cisco ios_xe 16.10.1f Yes
Operating System cisco ios_xe 16.10.1g Yes
Operating System cisco ios_xe 16.10.1s Yes
Operating System cisco ios_xe 16.10.2 Yes
Operating System cisco ios_xe 16.10.3 Yes
Operating System cisco ios_xe 16.11.1 Yes
Operating System cisco ios_xe 16.11.1a Yes
Operating System cisco ios_xe 16.11.1b Yes
Operating System cisco ios_xe 16.11.1c Yes
Operating System cisco ios_xe 16.11.1s Yes
Operating System cisco ios_xe 16.11.2 Yes
Operating System cisco ios_xe 16.12.1 Yes
Operating System cisco ios_xe 16.12.1a Yes
Operating System cisco ios_xe 16.12.1c Yes
Operating System cisco ios_xe 16.12.1s Yes
Operating System cisco ios_xe 16.12.1t Yes
Operating System cisco ios_xe 16.12.1w Yes
Operating System cisco ios_xe 16.12.1x Yes
Operating System cisco ios_xe 16.12.1y Yes
Operating System cisco ios_xe 16.12.2 Yes
Operating System cisco ios_xe 16.12.2a Yes
Operating System cisco ios_xe 16.12.2s Yes
Operating System cisco ios_xe 16.12.2t Yes
Operating System cisco ios_xe 16.12.3 Yes
Operating System cisco ios_xe 16.12.3a Yes
Operating System cisco ios_xe 16.12.3s Yes
Operating System cisco ios_xe 16.12.4 Yes
Operating System cisco ios_xe 16.12.4a Yes
Operating System cisco ios_xe 16.12.5 Yes
Operating System cisco ios_xe 16.12.5a Yes
Operating System cisco ios_xe 17.1.1 Yes
Operating System cisco ios_xe 17.1.1a Yes
Operating System cisco ios_xe 17.1.1s Yes
Operating System cisco ios_xe 17.1.1t Yes
Operating System cisco ios_xe 17.1.2 Yes
Operating System cisco ios_xe 17.1.3 Yes
Operating System cisco ios_xe 17.2.1 Yes
Operating System cisco ios_xe 17.2.1a Yes
Operating System cisco ios_xe 17.2.1r Yes
Operating System cisco ios_xe 17.2.1v Yes
Operating System cisco ios_xe 17.2.2 Yes
Operating System cisco ios_xe 17.2.3 Yes
Operating System cisco ios_xe 17.3.1 Yes
Operating System cisco ios_xe 17.3.1a Yes
Operating System cisco ios_xe 17.3.1w Yes
Operating System cisco ios_xe 17.3.1x Yes
Operating System cisco ios_xe 17.3.1z Yes
Operating System cisco ios_xe 17.3.2 Yes
Operating System cisco ios_xe 17.3.2a Yes
Operating System cisco ios_xe 17.3.3 Yes
Operating System cisco ios_xe 17.3.3a Yes
Operating System cisco ios_xe 17.3.4 Yes
Operating System cisco ios_xe 17.3.4a Yes
Operating System cisco ios_xe 17.3.4b Yes
Operating System cisco ios_xe 17.3.4c Yes
Operating System cisco ios_xe 17.4.1 Yes
Operating System cisco ios_xe 17.4.1a Yes
Operating System cisco ios_xe 17.4.1b Yes
Operating System cisco ios_xe 17.4.1c Yes
Operating System cisco ios_xe 17.4.2 Yes
Operating System cisco ios_xe 17.4.2a Yes
Operating System cisco ios_xe 17.5.1 Yes
Operating System cisco ios_xe 17.5.1a Yes
Operating System cisco ios_xe 17.6.1 Yes
Operating System cisco ios_xe 17.6.1a Yes
Hardware cisco 800m_integrated_services_router - No
Hardware cisco 807_industrial_integrated_services_router - No
Hardware cisco 812_3g_integrated_services_router - No
Hardware cisco 812_cifi_integrated_services_router - No
Hardware cisco 819_hardened_dual_radio_802.11n_wifi_integrated_services_router - No
Hardware cisco 819_hardened_integrated_services_router - No
Hardware cisco 829_industrial_integrated_services_router - No
Hardware cisco 860vae-w_integrated_services_router - No
Hardware cisco 861_integrated_services_router - No
Hardware cisco 861w_integrated_services_router - No
Hardware cisco 866vae_integrated_services_router - No
Hardware cisco 867_integrated_services_router - No
Hardware cisco 867vae_integrated_services_router - No
Hardware cisco 880-voice_integrated_services_router - No
Hardware cisco 880_3g_integrated_services_router - No
Hardware cisco 881-cube_integrated_services_router - No
Hardware cisco 881_3g_integrated_services_router - No
Hardware cisco 881_integrated_services_router - No
Hardware cisco 881w_integrated_services_router - No
Hardware cisco 886_integrated_services_router - No
Hardware cisco 886va-cube_integrated_services_router - No
Hardware cisco 886va-w_integrated_services_router - No
Hardware cisco 886va_integrated_services_router - No
Hardware cisco 886vag_3g_integrated_services_router - No
Hardware cisco 887_integrated_services_router - No
Hardware cisco 887v_integrated_services_router - No
Hardware cisco 887va-cube_integrated_services_router - No
Hardware cisco 887va-w_integrated_services_router - No
Hardware cisco 887va_integrated_services_router - No
Hardware cisco 887vag_3g_integrated_services_router - No
Hardware cisco 887vam-w_integrated_services_router - No
Hardware cisco 887vamg_3g_integrated_services_router - No
Hardware cisco 888-cube_integrated_services_router - No
Hardware cisco 888_integrated_services_router - No
Hardware cisco 888e-cube_integrated_services_router - No
Hardware cisco 888e_integrated_services_router - No
Hardware cisco 888eg_3g_integrated_services_router - No
Hardware cisco 888w_integrated_services_router - No
Hardware cisco 891-24x_integrated_services_router - No
Hardware cisco 891_integrated_services_router - No
Hardware cisco 891w_integrated_services_router - No
Hardware cisco 892_integrated_services_router - No
Hardware cisco 892f-cube_integrated_services_router - No
Hardware cisco 892w_integrated_services_router - No
Hardware cisco cgr_1000 - No
Hardware cisco cgr_1120 - No
Hardware cisco cgr_1240 - No
Hardware cisco ic3000_industrial_compute_gateway - No
Hardware cisco ie-4000-16gt4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-16t4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4gc4gp4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4gs8gp4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4s8p4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4t4p4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-4tc4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8gs4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8gt4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8gt8gp4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8s4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4000-8t4g-e_industrial_ethernet_switch - No
Hardware cisco ie-4010-16s12p_industrial_ethernet_switch - No
Hardware cisco ie-4010-4s24p_industrial_ethernet_switch - No
Hardware cisco ir510_wpan - No

References