CVE-2023-20076
Description
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an application. An attacker could exploit this vulnerability by deploying and activating an application in the Cisco IOx application hosting environment with a crafted activation payload file. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying host operating system.
How to fix
- cisco ic3000_industrial_compute_gateway1.4.2 or later
- cisco ios_xe17.6.5, 17.9.2 or later
- cisco cgr1240_firmware1.16.0.1 or later
- cisco cgr1000_firmware1.16.0.1 or later
- cisco ir510_wpan_firmware1.10.0.1 or later
- cisco 829_industrial_integrated_services_router_firmware15.9\(3\) or later
- cisco 807_industrial_integrated_services_router_firmware15.9\(3\) or later
- cisco 809_industrial_integrated_services_router_firmware15.9\(3\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ic3000_industrial_compute_gateway | v < 1.4.2 | 1.4.2 |
| cisco iox | No range specified | — |
| cisco ios_xe | v < 17.6.5, 17.9.0 ≤ v < 17.9.2, 17.10.0 | 17.6.5, 17.9.2 |
| cisco cgr1240_firmware | v < 1.16.0.1 | 1.16.0.1 |
| cisco cgr1000_firmware | v < 1.16.0.1 | 1.16.0.1 |
| cisco ir510_wpan_firmware | v < 1.10.0.1 | 1.10.0.1 |
| cisco 829_industrial_integrated_services_router_firmware | v < 15.9\(3\), 15.9\(3\)m, 15.9\(3\)m1, 15.9\(3\)m2, 15.9\(3\)m2a, 15.9\(3\)m3, 15.9\(3\)m4, 15.9\(3\)m4a, 15.9\(3\)m5, 15.9\(3\)m6a, 15.9\(3\)m6b | 15.9\(3\) |
| cisco 807_industrial_integrated_services_router_firmware | v < 15.9\(3\), 15.9\(3\)m, 15.9\(3\)m1, 15.9\(3\)m2, 15.9\(3\)m2a, 15.9\(3\)m3, 15.9\(3\)m4, 15.9\(3\)m4a, 15.9\(3\)m5, 15.9\(3\)m6a, 15.9\(3\)m6b | 15.9\(3\) |
| cisco 809_industrial_integrated_services_router_firmware | v < 15.9\(3\), 15.9\(3\)m, 15.9\(3\)m1, 15.9\(3\)m2, 15.9\(3\)m2a, 15.9\(3\)m3, 15.9\(3\)m4, 15.9\(3\)m4a, 15.9\(3\)m5, 15.9\(3\)m6a, 15.9\(3\)m6b | 15.9\(3\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.