CVE-2022-20726

{"id": "CVE-2022-20726", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "LOW"}, "impactScore": 4.2, "exploitabilityScore": 1.2}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-04-15T15:15:13.560", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-yuXQ6hFj", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}, {"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-yuXQ6hFj", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-22"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-755"}]}], "descriptions": [{"lang": "en", "value": "Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades en el entorno de alojamiento de aplicaciones Cisco IOx en varias plataformas de Cisco podr\u00edan permitir a un atacante inyectar comandos arbitrarios en el sistema operativo del host subyacente, ejecutar c\u00f3digo arbitrario en el sistema operativo del host subyacente, instalar aplicaciones sin ser autenticado o conducir un ataque de tipo cross-site scripting (XSS) contra un usuario del software afectado. Para m\u00e1s informaci\u00f3n sobre estas vulnerabilidades, consulte la secci\u00f3n Details de este aviso"}], "lastModified": "2024-11-21T06:43:25.447", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:cisco:cgr1000_compute_module:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBD4C0D6-AB7B-48B5-B1BD-8EBAEAC51524"}, {"criteria": "cpe:2.3:a:cisco:ic3000_industrial_compute_gateway:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E9AF42D-A861-4585-8FA6-28BD3623681E"}, {"criteria": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5802E2D8-7069-474C-826F-AEE7B50BFE34"}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E027FB12-862F-413E-AA2B-4BBD90AE3650"}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7131776-5DEB-4B96-8483-B81B538E24FA"}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5B78669-3B28-4F1D-993D-85282A7D0E96"}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3C73A3A-4B84-476F-AC3C-81DCB527E29A"}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1758F264-96F9-4EE9-9CA9-AD5407885547"}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6437E689-A049-4D48-AB7A-49CA7EBDE8B6"}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4C12918-E5BB-465E-9DA4-06B7351DD805"}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4862C453-8BD7-4D53-B2D6-CE3E44A4915A"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(1\\)t1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF662E36-0831-4892-850F-844B0E0B54DA"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(1\\)t2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E71F49D-E405-4AB4-9188-DA7B338DFD7B"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(1\\)t3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "204B0A52-F6AB-406B-B46D-E92F2D7D87F7"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(2\\)t:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "09578DDF-5D13-47C1-9BD1-A1A8B9B0C87D"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(2\\)t1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BBF8B70-DFBE-4F6E-83F0-171F03E97606"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(2\\)t2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA55D660-66C6-4278-8C27-25DB2712CC1A"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(2\\)t3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5609B342-D98E-4850-A0FE-810699A80A1F"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8320F23D-F6BE-405B-B645-1CEB984E8267"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m0a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CE2670E-8C17-448D-A5BD-5A4FBCAEC35A"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7C5C705-6A8C-4834-9D24-CFE26A232C15"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m1b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC270E40-CABA-44B4-B4DD-E9C47A97770B"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC1DB8C1-7F7D-4562-A317-87E925CAD524"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8AB2645F-C3BF-458F-9D07-6D66E1953730"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1B2303A3-CAF1-4DBA-BB6E-F205C23DCE6D"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "686FD45C-7722-4D98-A6D7-C36CAC56A4AA"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "871E33AC-B469-47BA-9317-DC9E3E9BF5C3"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C4091CAC-BFAA-404C-A827-4DA9EADDF621"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E0DA9FCA-4166-4084-96AF-E82CC4A4DB25"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "369A99E0-3451-41D1-8C56-5352EA689950"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "33D4A7FA-E4E0-49C2-97FD-A547A1612F75"}, {"criteria": "cpe:2.3:o:cisco:ios:15.6\\(3\\)m8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA0B918F-A28C-4B5A-A566-6E588B4F6696"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C8A00BF-4522-467B-A96E-5C33623DCA2D"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m0a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D2A434E7-B27C-4663-BE83-39A650D22D26"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47C106CF-CBD3-4630-8E77-EDB1643F97E6"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1DB7943-5CE1-44F6-B093-5EA65BF71A59"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64404B00-4956-47B8-ACDB-88E365E97212"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FE6A696-5CBC-4552-A54E-55C21BC74D7A"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41237041-1D82-4C6C-BF48-ECEDF9DB08C0"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CAB72CA3-088E-4EFE-BE1C-190C64101851"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA584AC4-96AB-4026-84DF-F44F3B97F7E6"}, {"criteria": "cpe:2.3:o:cisco:ios:15.7\\(3\\)m6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22EB41FD-4DE2-4753-A18C-C877B81B51D3"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A58C01B-459E-432F-A49F-68EC45EE6E14"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m0a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8DFE673-9A5E-4369-A7BB-3DE7F8E503C4"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56AD5BA0-4D08-4A92-88BE-60AF29BC35CD"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "198FF520-7631-49D9-B8A8-2E64F6237CC0"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m2a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94E067E8-552B-4691-9F6A-C5E8766287BE"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3C4162EC-90DE-4194-8ABC-55CCB8C24FF6"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6715A135-61A7-4E56-948D-8A8D5F7C98C7"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C836C26-DBC1-42CB-9B73-9F248D4F2B6A"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2CC4602-D1F5-4843-991A-2903C8336251"}, {"criteria": "cpe:2.3:o:cisco:ios:15.8\\(3\\)m7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BCCD64D-D73C-45FE-B49C-F79E23431B37"}, {"criteria": "cpe:2.3:o:cisco:ios:15.9\\(3\\)m:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEFE8A85-7F63-4E4C-A3FE-7B7E27AD1DF4"}, {"criteria": "cpe:2.3:o:cisco:ios:15.9\\(3\\)m1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9BA0A0E0-A9D8-4FC3-88BD-FA0E7290A9A0"}, {"criteria": "cpe:2.3:o:cisco:ios:15.9\\(3\\)m2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A1AF57E-79E9-40F2-817A-5E7D2760F1E8"}, {"criteria": "cpe:2.3:o:cisco:ios:15.9\\(3\\)m2a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BEF9CEA3-054B-4469-A10F-DFCB9057E5E4"}, {"criteria": "cpe:2.3:o:cisco:ios:15.9\\(3\\)m3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8313597-49A9-4918-B8D5-8E53C5C9AFAB"}, {"criteria": "cpe:2.3:o:cisco:ios:15.9\\(3\\)m4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63BEFCC8-CC04-4C41-B31A-BF01E40FA1AE"}, {"criteria": "cpe:2.3:o:cisco:ios:15.9\\(3\\)m4a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F0E473CF-FE4B-4DBE-9EBE-337AE415FA4D"}], "operator": "OR"}]}], "sourceIdentifier": "ykramarz@cisco.com"}