CVE Feed

    Dashboard / CVE / CVE-2022-20725

    CVE-2022-20725

    Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.

    Published:Apr 15, 2022
    Last Modified:Nov 21, 2024
    EPS:Apr 15, 2022
    EPSS Score:0.00828
    CVSS Score:5.5

    Affected Products

    Vendor
    Cisco
    Product
    800m Integrated Services Router
    Vendor
    Cisco
    Product
    807 Industrial Integrated Services Router
    Vendor
    Cisco
    Product
    812 3g Integrated Services Router
    Vendor
    Cisco
    Product
    812 Cifi Integrated Services Router
    Vendor
    Cisco
    Product
    819 Hardened Dual Radio 802.11n Wifi Integrated Services Router
    Vendor
    Cisco
    Product
    819 Hardened Integrated Services Router
    Vendor
    Cisco
    Product
    829 Industrial Integrated Services Router
    Vendor
    Cisco
    Product
    860vae-w Integrated Services Router
    Vendor
    Cisco
    Product
    861 Integrated Services Router
    Vendor
    Cisco
    Product
    861w Integrated Services Router
    Vendor
    Cisco
    Product
    866vae Integrated Services Router
    Vendor
    Cisco
    Product
    867 Integrated Services Router
    Vendor
    Cisco
    Product
    867vae Integrated Services Router
    Vendor
    Cisco
    Product
    880-voice Integrated Services Router
    Vendor
    Cisco
    Product
    880 3g Integrated Services Router
    Vendor
    Cisco
    Product
    881-cube Integrated Services Router
    Vendor
    Cisco
    Product
    881 3g Integrated Services Router
    Vendor
    Cisco
    Product
    881 Integrated Services Router
    Vendor
    Cisco
    Product
    881w Integrated Services Router
    Vendor
    Cisco
    Product
    886 Integrated Services Router
    Vendor
    Cisco
    Product
    886va-cube Integrated Services Router
    Vendor
    Cisco
    Product
    886va-w Integrated Services Router
    Vendor
    Cisco
    Product
    886va Integrated Services Router
    Vendor
    Cisco
    Product
    886vag 3g Integrated Services Router
    Vendor
    Cisco
    Product
    887 Integrated Services Router
    Vendor
    Cisco
    Product
    887v Integrated Services Router
    Vendor
    Cisco
    Product
    887va-cube Integrated Services Router
    Vendor
    Cisco
    Product
    887va-w Integrated Services Router
    Vendor
    Cisco
    Product
    887va Integrated Services Router
    Vendor
    Cisco
    Product
    887vag 3g Integrated Services Router
    Vendor
    Cisco
    Product
    887vam-w Integrated Services Router
    Vendor
    Cisco
    Product
    887vamg 3g Integrated Services Router
    Vendor
    Cisco
    Product
    888-cube Integrated Services Router
    Vendor
    Cisco
    Product
    888 Integrated Services Router
    Vendor
    Cisco
    Product
    888e-cube Integrated Services Router
    Vendor
    Cisco
    Product
    888e Integrated Services Router
    Vendor
    Cisco
    Product
    888eg 3g Integrated Services Router
    Vendor
    Cisco
    Product
    888w Integrated Services Router
    Vendor
    Cisco
    Product
    891-24x Integrated Services Router
    Vendor
    Cisco
    Product
    891 Integrated Services Router
    Vendor
    Cisco
    Product
    891w Integrated Services Router
    Vendor
    Cisco
    Product
    892 Integrated Services Router
    Vendor
    Cisco
    Product
    892f-cube Integrated Services Router
    Vendor
    Cisco
    Product
    892w Integrated Services Router
    Vendor
    Cisco
    Product
    Cgr1000 Compute Module
    Vendor
    Cisco
    Product
    Cgr 1000
    Vendor
    Cisco
    Product
    Cgr 1120
    Vendor
    Cisco
    Product
    Cgr 1240
    Vendor
    Cisco
    Product
    Ic3000 Industrial Compute Gateway
    Vendor
    Cisco
    Product
    Ie-4000-16gt4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-16t4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-4gc4gp4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-4gs8gp4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-4s8p4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-4t4p4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-4tc4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-8gs4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-8gt4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-8gt8gp4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-8s4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4000-8t4g-e Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4010-16s12p Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ie-4010-4s24p Industrial Ethernet Switch
    Vendor
    Cisco
    Product
    Ios
    Vendor
    Cisco
    Product
    Ios Xe
    Vendor
    Cisco
    Product
    Ir510 Operating System
    Vendor
    Cisco
    Product
    Ir510 Wpan

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High