CVE Vulnerabilities

CVE-2022-20726

Improper Handling of Exceptional Conditions

Published: Apr 15, 2022 | Modified: Nov 07, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.

Weakness

The product does not handle or incorrectly handles an exceptional condition.

Affected Software

Name Vendor Start Version End Version
Cgr1000_compute_module Cisco * *
Ic3000_industrial_compute_gateway Cisco * *
Ios Cisco * *
Ios Cisco 15.2(5)e1 (including) 15.2(5)e1 (including)
Ios Cisco 15.2(5)e2c (including) 15.2(5)e2c (including)
Ios Cisco 15.2(6)e0a (including) 15.2(6)e0a (including)
Ios Cisco 15.2(6)e1 (including) 15.2(6)e1 (including)
Ios Cisco 15.2(6)e2a (including) 15.2(6)e2a (including)
Ios Cisco 15.2(7)e (including) 15.2(7)e (including)
Ios Cisco 15.2(7)e0b (including) 15.2(7)e0b (including)
Ios Cisco 15.2(7)e0s (including) 15.2(7)e0s (including)
Ios Cisco 15.6(1)t1 (including) 15.6(1)t1 (including)
Ios Cisco 15.6(1)t2 (including) 15.6(1)t2 (including)
Ios Cisco 15.6(1)t3 (including) 15.6(1)t3 (including)
Ios Cisco 15.6(2)t (including) 15.6(2)t (including)
Ios Cisco 15.6(2)t1 (including) 15.6(2)t1 (including)
Ios Cisco 15.6(2)t2 (including) 15.6(2)t2 (including)
Ios Cisco 15.6(2)t3 (including) 15.6(2)t3 (including)
Ios Cisco 15.6(3)m (including) 15.6(3)m (including)
Ios Cisco 15.6(3)m0a (including) 15.6(3)m0a (including)
Ios Cisco 15.6(3)m1 (including) 15.6(3)m1 (including)
Ios Cisco 15.6(3)m1b (including) 15.6(3)m1b (including)
Ios Cisco 15.6(3)m2 (including) 15.6(3)m2 (including)
Ios Cisco 15.6(3)m3 (including) 15.6(3)m3 (including)
Ios Cisco 15.6(3)m3a (including) 15.6(3)m3a (including)
Ios Cisco 15.6(3)m4 (including) 15.6(3)m4 (including)
Ios Cisco 15.6(3)m5 (including) 15.6(3)m5 (including)
Ios Cisco 15.6(3)m6 (including) 15.6(3)m6 (including)
Ios Cisco 15.6(3)m6a (including) 15.6(3)m6a (including)
Ios Cisco 15.6(3)m6b (including) 15.6(3)m6b (including)
Ios Cisco 15.6(3)m7 (including) 15.6(3)m7 (including)
Ios Cisco 15.6(3)m8 (including) 15.6(3)m8 (including)
Ios Cisco 15.7(3)m (including) 15.7(3)m (including)
Ios Cisco 15.7(3)m0a (including) 15.7(3)m0a (including)
Ios Cisco 15.7(3)m1 (including) 15.7(3)m1 (including)
Ios Cisco 15.7(3)m2 (including) 15.7(3)m2 (including)
Ios Cisco 15.7(3)m3 (including) 15.7(3)m3 (including)
Ios Cisco 15.7(3)m4 (including) 15.7(3)m4 (including)
Ios Cisco 15.7(3)m4a (including) 15.7(3)m4a (including)
Ios Cisco 15.7(3)m4b (including) 15.7(3)m4b (including)
Ios Cisco 15.7(3)m5 (including) 15.7(3)m5 (including)
Ios Cisco 15.7(3)m6 (including) 15.7(3)m6 (including)
Ios Cisco 15.8(3)m (including) 15.8(3)m (including)
Ios Cisco 15.8(3)m0a (including) 15.8(3)m0a (including)
Ios Cisco 15.8(3)m1 (including) 15.8(3)m1 (including)
Ios Cisco 15.8(3)m2 (including) 15.8(3)m2 (including)
Ios Cisco 15.8(3)m2a (including) 15.8(3)m2a (including)
Ios Cisco 15.8(3)m3 (including) 15.8(3)m3 (including)
Ios Cisco 15.8(3)m4 (including) 15.8(3)m4 (including)
Ios Cisco 15.8(3)m5 (including) 15.8(3)m5 (including)
Ios Cisco 15.8(3)m6 (including) 15.8(3)m6 (including)
Ios Cisco 15.8(3)m7 (including) 15.8(3)m7 (including)
Ios Cisco 15.9(3)m (including) 15.9(3)m (including)
Ios Cisco 15.9(3)m1 (including) 15.9(3)m1 (including)
Ios Cisco 15.9(3)m2 (including) 15.9(3)m2 (including)
Ios Cisco 15.9(3)m2a (including) 15.9(3)m2a (including)
Ios Cisco 15.9(3)m3 (including) 15.9(3)m3 (including)
Ios Cisco 15.9(3)m4 (including) 15.9(3)m4 (including)
Ios Cisco 15.9(3)m4a (including) 15.9(3)m4a (including)

References