CVE-2022-20851
Summary
| CVE | CVE-2022-20851 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-09-30 19:15:00 UTC |
| Updated | 2023-11-07 03:43:00 UTC |
| Description | A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web UI API. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. To exploit this vulnerability, an attacker must have valid Administrator privileges on the affected device. |
Risk And Classification
Problem Types: CWE-78
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | 1000 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4g Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-6g Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-8p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1101-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1101 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109-2p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1111x-8p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1111x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 111x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1120 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1131 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1160 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4000 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4221 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4321 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4331 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4351 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4431 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4451-x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4451 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4461 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 8101-32fh | - | All | All | All |
| Hardware | Cisco | 8101-32h | - | All | All | All |
| Hardware | Cisco | 8102-64h | - | All | All | All |
| Hardware | Cisco | 8201 | - | All | All | All |
| Hardware | Cisco | 8201-32fh | - | All | All | All |
| Hardware | Cisco | 8202 | - | All | All | All |
| Hardware | Cisco | 8800 12-slot | - | All | All | All |
| Hardware | Cisco | 8800 18-slot | - | All | All | All |
| Hardware | Cisco | 8800 4-slot | - | All | All | All |
| Hardware | Cisco | 8800 8-slot | - | All | All | All |
| Hardware | Cisco | 8804 | - | All | All | All |
| Hardware | Cisco | 8808 | - | All | All | All |
| Hardware | Cisco | 8812 | - | All | All | All |
| Hardware | Cisco | 8818 | - | All | All | All |
| Hardware | Cisco | 8831 | - | All | All | All |
| Hardware | Cisco | Asr 1000-esp100 | - | All | All | All |
| Hardware | Cisco | Asr 1000-x | - | All | All | All |
| Hardware | Cisco | Asr 1001 | - | All | All | All |
| Hardware | Cisco | Asr 1001-hx | - | All | All | All |
| Hardware | Cisco | Asr 1001-hx R | - | All | All | All |
| Hardware | Cisco | Asr 1001-x | - | All | All | All |
| Hardware | Cisco | Asr 1001-x R | - | All | All | All |
| Hardware | Cisco | Asr 1002 | - | All | All | All |
| Hardware | Cisco | Asr 1002-hx | - | All | All | All |
| Hardware | Cisco | Asr 1002-hx R | - | All | All | All |
| Hardware | Cisco | Asr 1002-x | - | All | All | All |
| Hardware | Cisco | Asr 1002-x R | - | All | All | All |
| Hardware | Cisco | Asr 1002 Fixed Router | - | All | All | All |
| Hardware | Cisco | Asr 1004 | - | All | All | All |
| Hardware | Cisco | Asr 1006 | - | All | All | All |
| Hardware | Cisco | Asr 1006-x | - | All | All | All |
| Hardware | Cisco | Asr 1009-x | - | All | All | All |
| Hardware | Cisco | Asr 1013 | - | All | All | All |
| Hardware | Cisco | Asr 1023 | - | All | All | All |
| Hardware | Cisco | Catalyst 3650 | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48fd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48fd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48fd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uq | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48ur | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48ur-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48ur-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48ur-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uz | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uz-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uz-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uz-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pd | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pdm | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pdm-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pdm-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pdm-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ps-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ps-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ps-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24td-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24td-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24td-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ts-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ts-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ts-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fq | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fqm | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fqm-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fqm-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fqm-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fs-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ps-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ps-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ps-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48td-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48td-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48td-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48tq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48tq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48tq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ts-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ts-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ts-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24pd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24pd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24pd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24uq | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24uq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24uq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24uq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850 | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12s-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12s-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12x48u | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-16xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-16xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24p-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24p-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24p-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24pw-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24s-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24s-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24t-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24t-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24t-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24u | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24u-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24u-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24u-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xs | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xu | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xu-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xu-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xu-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-32xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-32xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48f-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48f-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48f-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48p-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48p-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48p-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48pw-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48t-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48t-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48t-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48u | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48u-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48u-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48u-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs-f-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs-f-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-nm-2-40g | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-nm-8-10g | - | All | All | All |
| Hardware | Cisco | Catalyst 8200 | - | All | All | All |
| Hardware | Cisco | Catalyst 8300 | - | All | All | All |
| Hardware | Cisco | Catalyst 8300-1n1s-4t2x | - | All | All | All |
| Hardware | Cisco | Catalyst 8300-1n1s-6t | - | All | All | All |
| Hardware | Cisco | Catalyst 8300-2n2s-4t2x | - | All | All | All |
| Hardware | Cisco | Catalyst 8300-2n2s-6t | - | All | All | All |
| Hardware | Cisco | Catalyst 8500 | - | All | All | All |
| Hardware | Cisco | Catalyst 8500-4qc | - | All | All | All |
| Hardware | Cisco | Catalyst 8500l | - | All | All | All |
| Hardware | Cisco | Catalyst 8510csr | - | All | All | All |
| Hardware | Cisco | Catalyst 8510msr | - | All | All | All |
| Hardware | Cisco | Catalyst 8540csr | - | All | All | All |
| Hardware | Cisco | Catalyst 8540msr | - | All | All | All |
| Hardware | Cisco | Catalyst 9200 | - | All | All | All |
| Hardware | Cisco | Catalyst 9200cx | - | All | All | All |
| Hardware | Cisco | Catalyst 9200l | - | All | All | All |
| Hardware | Cisco | Catalyst 9300 | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24p-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24p-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24s-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24s-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24t-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24t-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24u-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24u-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24ux-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24ux-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48p-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48p-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48s-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48s-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48t-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48t-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48u-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48u-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48un-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48un-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48uxm-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48uxm-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24p-4g-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24p-4g-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24p-4x-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24p-4x-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24t-4g-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24t-4g-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24t-4x-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24t-4x-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48p-4g-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48p-4g-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48p-4x-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48p-4x-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48t-4g-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48t-4g-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48t-4x-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48t-4x-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300lm | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l Stack | - | All | All | All |
| Hardware | Cisco | Catalyst 9300x | - | All | All | All |
| Hardware | Cisco | Catalyst 9400 | - | All | All | All |
| Hardware | Cisco | Catalyst 9400 Supervisor Engine-1 | - | All | All | All |
| Hardware | Cisco | Catalyst 9407r | - | All | All | All |
| Hardware | Cisco | Catalyst 9410r | - | All | All | All |
| Hardware | Cisco | Catalyst 9500 | - | All | All | All |
| Hardware | Cisco | Catalyst 9500h | - | All | All | All |
| Hardware | Cisco | Catalyst 9600 | - | All | All | All |
| Hardware | Cisco | Catalyst 9600x | - | All | All | All |
| Hardware | Cisco | Catalyst 9600 Supervisor Engine-1 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-40 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-80 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-cl | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-c | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-f | - | All | All | All |
| Application | Cisco | Ios Xe | 17.6.1 | All | All | All |
| Operating System | Cisco | Ios Xe | 17.6.1 | All | All | All |
| Hardware | Cisco | Isr 1000 | - | All | All | All |
| Hardware | Cisco | Isr 1100 | - | All | All | All |
| Hardware | Cisco | Isr 1100-4g | - | All | All | All |
| Hardware | Cisco | Isr 1100-4p | - | All | All | All |
| Hardware | Cisco | Isr 1100-6g | - | All | All | All |
| Hardware | Cisco | Isr 1100-8p | - | All | All | All |
| Hardware | Cisco | Isr 1101 | - | All | All | All |
| Hardware | Cisco | Isr 1101-4p | - | All | All | All |
| Hardware | Cisco | Isr 1109 | - | All | All | All |
| Hardware | Cisco | Isr 1109-2p | - | All | All | All |
| Hardware | Cisco | Isr 1109-4p | - | All | All | All |
| Hardware | Cisco | Isr 1111x | - | All | All | All |
| Hardware | Cisco | Isr 1111x-8p | - | All | All | All |
| Hardware | Cisco | Isr 111x | - | All | All | All |
| Hardware | Cisco | Isr 1120 | - | All | All | All |
| Hardware | Cisco | Isr 1131 | - | All | All | All |
| Hardware | Cisco | Isr 1160 | - | All | All | All |
| Hardware | Cisco | Isr 4000 | - | All | All | All |
| Hardware | Cisco | Isr 4221 | - | All | All | All |
| Hardware | Cisco | Isr 4321 | - | All | All | All |
| Hardware | Cisco | Isr 4331 | - | All | All | All |
| Hardware | Cisco | Isr 4351 | - | All | All | All |
| Hardware | Cisco | Isr 4431 | - | All | All | All |
| Hardware | Cisco | Isr 4451 | - | All | All | All |
| Hardware | Cisco | Isr 4451-x | - | All | All | All |
| Hardware | Cisco | Isr 4461 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 20220928 Cisco IOS XE Software Web UI Command Injection Vulnerability | CISCO | tools.cisco.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 317231 Cisco Internetwork Operating System (IOS) XE Software Web UI Command Injection Vulnerability (cisco-sa-webui-cmdinj-Gje47EMn)