CVE-2022-20718: medium-severity vulnerability in Cisco IOS
Cisco IOx Application Hosting Environment Vulnerabilities
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.5epss 2.4%
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N
Affected products
Cisco · Cisco IOSRelated CVEs — Cisco IOS
In the same product, most dangerous first.
CVE-2022-20719MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 2.7%CVE-2021-1385MEDIUMCisco IOx Application Environment Path Traversal VulnerabilityEPSS 2.7%CVE-2022-20723MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 2.1%CVE-2018-0282MEDIUMCisco IOS and IOS XE Software TCP Denial of Service VulnerabilityEPSS 2.0%CVE-2019-12647HIGHCisco IOS and IOS XE Software IP Ident Denial of Service VulnerabilityEPSS 2.0%CVE-2020-3408HIGHCisco IOS and IOS XE Software Split DNS Denial of Service VulnerabilityEPSS 1.6%