CVE-2022-20677

Cisco IOx Application Hosting Environment Vulnerabilities

MEDIUM

6.7

CVSS Score

Published: April 15, 2022 at 02:16 PM UTC

Updated: June 17, 2026 at 04:24 AM UTC

62 products affected across 1 vendorIOSAsr 1001-XCatalyst 9800-L

Using Cisco IOS by Cisco?

Get instant alerts when new vulnerabilities affect Cisco IOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.6%

SSVC

No known exploit

Description

Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being authenticated, or conduct a cross-site scripting (XSS) attack against a user of the affected software. For more information about these vulnerabilities, see the Details section of this advisory.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

17.6.1

cisco-1100-4g-integrated-services-router (environment) · cisco-1100-6g-integrated-services-router (environment) · cisco-1101-integrated-services-router (environment) · cisco-1109-integrated-services-router (environment) · cisco-1111x-integrated-services-router (environment) · cisco-111x-integrated-services-router (environment) · cisco-1120-integrated-services-router (environment) · cisco-1131-integrated-services-router (environment) · cisco-1160-integrated-services-router (environment) · cisco-4221-integrated-services-router (environment) · cisco-8101-32fh (environment) · cisco-8101-32h (environment) · cisco-8102-64h (environment) · cisco-8201 (environment) · cisco-8201-32fh (environment) · cisco-8202 (environment) · cisco-8800 (environment) · cisco-asr-1001-x (environment) · cisco-asr-1002-hx (environment) · cisco-asr-1006-x (environment) · cisco-asr-1009-x (environment) · cisco-asr-900 (environment) · cisco-asr-9000v-v2 (environment) · cisco-asr-9001 (environment) · cisco-asr-9006 (environment) · cisco-asr-9010 (environment) · cisco-asr-9901 (environment) · cisco-asr-9902 (environment) · cisco-asr-9903 (environment) · cisco-asr-9904 (environment) · cisco-asr-9906 (environment) · cisco-asr-9910 (environment) · cisco-asr-9912 (environment) · cisco-asr-9922 (environment) · cisco-catalyst-3650 (environment) · cisco-catalyst-3850 (environment) · cisco-catalyst-8200 (environment) · cisco-catalyst-8300 (environment) · cisco-catalyst-8500 (environment) · cisco-catalyst-8500l (environment) · cisco-catalyst-9200 (environment) · cisco-catalyst-9300 (environment) · cisco-catalyst-9400 (environment) · cisco-catalyst-9500 (environment) · cisco-catalyst-9500h (environment) · cisco-catalyst-9600 (environment) · cisco-catalyst-9800 (environment) · cisco-catalyst-9800-40 (environment) · cisco-catalyst-9800-80 (environment) · cisco-catalyst-9800-cl (environment) · cisco-catalyst-9800-l (environment) · cisco-catalyst-cg418-e (environment) · cisco-catalyst-cg522-e (environment) · cisco-catalyst-ess9300 (environment) · cisco-catalyst-ie3200 (environment) · cisco-catalyst-ie3300 (environment) · cisco-catalyst-ie3400 (environment) · cisco-catalyst-ie9300 (environment) · cisco-cloud-services-router-1000v (environment) · cisco-esr3300 (environment) · cisco-esr6300 (environment)

1100-4G Integrated Services Router · Ciscodevice

80%

All versions

1100-6G Integrated Services Router · Ciscodevice

80%

All versions

1101 Integrated Services Router · Ciscodevice

80%

All versions

1109 Integrated Services Router · Ciscodevice

80%

All versions