CVE-2022-20677: Cisco IOx Application Hosting Environment Vulnerabilities
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-20677.
What is the severity of CVE-2022-20677?
The severity of CVE-2022-20677 is high with a score of 6.7.
Which platforms are affected by CVE-2022-20677?
Multiple Cisco platforms are affected by CVE-2022-20677.
What can an attacker do with CVE-2022-20677?
An attacker can inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, and install applications without being authenticated.
Where can I find more information about CVE-2022-20677?
You can find more information about CVE-2022-20677 on the Cisco Security Advisory page: [Link](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-yuXQ6hFj).