CVE-2022-20677

CVE-2022-20677 identifies multiple vulnerabilities within the Cisco IOx application hosting environment across various Cisco platforms. These flaws could enable a highly privileged attacker to inject arbitrary commands, execute arbitrary code, install unauthorized applications, or perform cross-site scripting attacks. With a CVSS score of 6.7 (Medium), the vulnerabilities require high privileges for local exploitation and could lead to high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.