A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI API. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. To exploit this vulnerability, an attacker must have valid Administrator privileges on the affected device.

Project Subscriptions

Vendors Products
1000 Integrated Services Router Subscribe
1100-4g Integrated Services Router Subscribe
1100-4p Integrated Services Router Subscribe
1100-6g Integrated Services Router Subscribe
1100-8p Integrated Services Router Subscribe
1100 Integrated Services Router Subscribe
1101-4p Integrated Services Router Subscribe
1101 Integrated Services Router Subscribe
1109-2p Integrated Services Router Subscribe
1109-4p Integrated Services Router Subscribe
1109 Integrated Services Router Subscribe
1111x-8p Integrated Services Router Subscribe
1111x Integrated Services Router Subscribe
111x Integrated Services Router Subscribe
1120 Integrated Services Router Subscribe
1131 Integrated Services Router Subscribe
1160 Integrated Services Router Subscribe
4000 Integrated Services Router Subscribe
4221 Integrated Services Router Subscribe
4321 Integrated Services Router Subscribe
4331 Integrated Services Router Subscribe
4351 Integrated Services Router Subscribe
4431 Integrated Services Router Subscribe
4451-x Integrated Services Router Subscribe
4451 Integrated Services Router Subscribe
4461 Integrated Services Router Subscribe
8101-32fh Subscribe
8101-32h Subscribe
8102-64h Subscribe
8201-32fh Subscribe
8800 12-slot Subscribe
8800 18-slot Subscribe
8800 4-slot Subscribe
8800 8-slot Subscribe
Asr 1000-esp100 Subscribe
Asr 1000-x Subscribe
Asr 1001 Subscribe
Asr 1001-hx Subscribe
Asr 1001-hx R Subscribe
Asr 1001-x Subscribe
Asr 1001-x R Subscribe
Asr 1002 Subscribe
Asr 1002-hx Subscribe
Asr 1002-hx R Subscribe
Asr 1002-x Subscribe
Asr 1002-x R Subscribe
Asr 1002 Fixed Router Subscribe
Asr 1004 Subscribe
Asr 1006 Subscribe
Asr 1006-x Subscribe
Asr 1009-x Subscribe
Asr 1013 Subscribe
Asr 1023 Subscribe
Catalyst 3650 Subscribe
Catalyst 3650-12x48fd-e Subscribe
Catalyst 3650-12x48fd-l Subscribe
Catalyst 3650-12x48fd-s Subscribe
Catalyst 3650-12x48uq Subscribe
Catalyst 3650-12x48uq-e Subscribe
Catalyst 3650-12x48uq-l Subscribe
Catalyst 3650-12x48uq-s Subscribe
Catalyst 3650-12x48ur Subscribe
Catalyst 3650-12x48ur-e Subscribe
Catalyst 3650-12x48ur-l Subscribe
Catalyst 3650-12x48ur-s Subscribe
Catalyst 3650-12x48uz Subscribe
Catalyst 3650-12x48uz-e Subscribe
Catalyst 3650-12x48uz-l Subscribe
Catalyst 3650-12x48uz-s Subscribe
Catalyst 3650-24pd Subscribe
Catalyst 3650-24pd-e Subscribe
Catalyst 3650-24pd-l Subscribe
Catalyst 3650-24pd-s Subscribe
Catalyst 3650-24pdm Subscribe
Catalyst 3650-24pdm-e Subscribe
Catalyst 3650-24pdm-l Subscribe
Catalyst 3650-24pdm-s Subscribe
Catalyst 3650-24ps-e Subscribe
Catalyst 3650-24ps-l Subscribe
Catalyst 3650-24ps-s Subscribe
Catalyst 3650-24td-e Subscribe
Catalyst 3650-24td-l Subscribe
Catalyst 3650-24td-s Subscribe
Catalyst 3650-24ts-e Subscribe
Catalyst 3650-24ts-l Subscribe
Catalyst 3650-24ts-s Subscribe
Catalyst 3650-48fd-e Subscribe
Catalyst 3650-48fd-l Subscribe
Catalyst 3650-48fd-s Subscribe
Catalyst 3650-48fq Subscribe
Catalyst 3650-48fq-e Subscribe
Catalyst 3650-48fq-l Subscribe
Catalyst 3650-48fq-s Subscribe
Catalyst 3650-48fqm Subscribe
Catalyst 3650-48fqm-e Subscribe
Catalyst 3650-48fqm-l Subscribe
Catalyst 3650-48fqm-s Subscribe
Catalyst 3650-48fs-e Subscribe
Catalyst 3650-48fs-l Subscribe
Catalyst 3650-48fs-s Subscribe
Catalyst 3650-48pd-e Subscribe
Catalyst 3650-48pd-l Subscribe
Catalyst 3650-48pd-s Subscribe
Catalyst 3650-48pq-e Subscribe
Catalyst 3650-48pq-l Subscribe
Catalyst 3650-48pq-s Subscribe
Catalyst 3650-48ps-e Subscribe
Catalyst 3650-48ps-l Subscribe
Catalyst 3650-48ps-s Subscribe
Catalyst 3650-48td-e Subscribe
Catalyst 3650-48td-l Subscribe
Catalyst 3650-48td-s Subscribe
Catalyst 3650-48tq-e Subscribe
Catalyst 3650-48tq-l Subscribe
Catalyst 3650-48tq-s Subscribe
Catalyst 3650-48ts-e Subscribe
Catalyst 3650-48ts-l Subscribe
Catalyst 3650-48ts-s Subscribe
Catalyst 3650-8x24pd-e Subscribe
Catalyst 3650-8x24pd-l Subscribe
Catalyst 3650-8x24pd-s Subscribe
Catalyst 3650-8x24uq Subscribe
Catalyst 3650-8x24uq-e Subscribe
Catalyst 3650-8x24uq-l Subscribe
Catalyst 3650-8x24uq-s Subscribe
Catalyst 3850 Subscribe
Catalyst 3850-12s-e Subscribe
Catalyst 3850-12s-s Subscribe
Catalyst 3850-12x48u Subscribe
Catalyst 3850-12xs-e Subscribe
Catalyst 3850-12xs-s Subscribe
Catalyst 3850-16xs-e Subscribe
Catalyst 3850-16xs-s Subscribe
Catalyst 3850-24p-e Subscribe
Catalyst 3850-24p-l Subscribe
Catalyst 3850-24p-s Subscribe
Catalyst 3850-24pw-s Subscribe
Catalyst 3850-24s-e Subscribe
Catalyst 3850-24s-s Subscribe
Catalyst 3850-24t-e Subscribe
Catalyst 3850-24t-l Subscribe
Catalyst 3850-24t-s Subscribe
Catalyst 3850-24u Subscribe
Catalyst 3850-24u-e Subscribe
Catalyst 3850-24u-l Subscribe
Catalyst 3850-24u-s Subscribe
Catalyst 3850-24xs Subscribe
Catalyst 3850-24xs-e Subscribe
Catalyst 3850-24xs-s Subscribe
Catalyst 3850-24xu Subscribe
Catalyst 3850-24xu-e Subscribe
Catalyst 3850-24xu-l Subscribe
Catalyst 3850-24xu-s Subscribe
Catalyst 3850-32xs-e Subscribe
Catalyst 3850-32xs-s Subscribe
Catalyst 3850-48f-e Subscribe
Catalyst 3850-48f-l Subscribe
Catalyst 3850-48f-s Subscribe
Catalyst 3850-48p-e Subscribe
Catalyst 3850-48p-l Subscribe
Catalyst 3850-48p-s Subscribe
Catalyst 3850-48pw-s Subscribe
Catalyst 3850-48t-e Subscribe
Catalyst 3850-48t-l Subscribe
Catalyst 3850-48t-s Subscribe
Catalyst 3850-48u Subscribe
Catalyst 3850-48u-e Subscribe
Catalyst 3850-48u-l Subscribe
Catalyst 3850-48u-s Subscribe
Catalyst 3850-48xs Subscribe
Catalyst 3850-48xs-e Subscribe
Catalyst 3850-48xs-f-e Subscribe
Catalyst 3850-48xs-f-s Subscribe
Catalyst 3850-48xs-s Subscribe
Catalyst 3850-nm-2-40g Subscribe
Catalyst 3850-nm-8-10g Subscribe
Catalyst 8200 Subscribe
Catalyst 8300 Subscribe
Catalyst 8300-1n1s-4t2x Subscribe
Catalyst 8300-1n1s-6t Subscribe
Catalyst 8300-2n2s-4t2x Subscribe
Catalyst 8300-2n2s-6t Subscribe
Catalyst 8500 Subscribe
Catalyst 8500-4qc Subscribe
Catalyst 8500l Subscribe
Catalyst 8510csr Subscribe
Catalyst 8510msr Subscribe
Catalyst 8540csr Subscribe
Catalyst 8540msr Subscribe
Catalyst 9200 Subscribe
Catalyst 9200cx Subscribe
Catalyst 9200l Subscribe
Catalyst 9300 Subscribe
Catalyst 9300-24p-a Subscribe
Catalyst 9300-24p-e Subscribe
Catalyst 9300-24s-a Subscribe
Catalyst 9300-24s-e Subscribe
Catalyst 9300-24t-a Subscribe
Catalyst 9300-24t-e Subscribe
Catalyst 9300-24u-a Subscribe
Catalyst 9300-24u-e Subscribe
Catalyst 9300-24ux-a Subscribe
Catalyst 9300-24ux-e Subscribe
Catalyst 9300-48p-a Subscribe
Catalyst 9300-48p-e Subscribe
Catalyst 9300-48s-a Subscribe
Catalyst 9300-48s-e Subscribe
Catalyst 9300-48t-a Subscribe
Catalyst 9300-48t-e Subscribe
Catalyst 9300-48u-a Subscribe
Catalyst 9300-48u-e Subscribe
Catalyst 9300-48un-a Subscribe
Catalyst 9300-48un-e Subscribe
Catalyst 9300-48uxm-a Subscribe
Catalyst 9300-48uxm-e Subscribe
Catalyst 9300l Subscribe
Catalyst 9300l-24p-4g-a Subscribe
Catalyst 9300l-24p-4g-e Subscribe
Catalyst 9300l-24p-4x-a Subscribe
Catalyst 9300l-24p-4x-e Subscribe
Catalyst 9300l-24t-4g-a Subscribe
Catalyst 9300l-24t-4g-e Subscribe
Catalyst 9300l-24t-4x-a Subscribe
Catalyst 9300l-24t-4x-e Subscribe
Catalyst 9300l-48p-4g-a Subscribe
Catalyst 9300l-48p-4g-e Subscribe
Catalyst 9300l-48p-4x-a Subscribe
Catalyst 9300l-48p-4x-e Subscribe
Catalyst 9300l-48t-4g-a Subscribe
Catalyst 9300l-48t-4g-e Subscribe
Catalyst 9300l-48t-4x-a Subscribe
Catalyst 9300l-48t-4x-e Subscribe
Catalyst 9300l Stack Subscribe
Catalyst 9300lm Subscribe
Catalyst 9300x Subscribe
Catalyst 9400 Subscribe
Catalyst 9400 Supervisor Engine-1 Subscribe
Catalyst 9407r Subscribe
Catalyst 9410r Subscribe
Catalyst 9500 Subscribe
Catalyst 9500h Subscribe
Catalyst 9600 Subscribe
Catalyst 9600 Supervisor Engine-1 Subscribe
Catalyst 9600x Subscribe
Catalyst 9800 Subscribe
Catalyst 9800-40 Subscribe
Catalyst 9800-80 Subscribe
Catalyst 9800-cl Subscribe
Catalyst 9800-l Subscribe
Catalyst 9800-l-c Subscribe
Catalyst 9800-l-f Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2022-26101 A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI API. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. To exploit this vulnerability, an attacker must have valid Administrator privileges on the affected device.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Fri, 01 Nov 2024 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-11-01T18:50:35.156Z

Reserved: 2021-11-02T00:00:00

Link: CVE-2022-20851

cve-icon Vulnrichment

Updated: 2024-08-03T02:24:50.292Z

cve-icon NVD

Status : Modified

Published: 2022-09-30T19:15:12.727

Modified: 2024-11-21T06:43:41.110

Link: CVE-2022-20851

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses