Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:807_industrial_integrated_services_router_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
Product807 Industrial Integrated Services Router Firmware (d387a96f-3788-5344-91af-05deb9b43ec9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-20196 vulnerable 2026-06-08 07:08:46.710161 Details available
MEDIUM (5.3)
A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the Cisco IOx application hosting environment to stop responding. The IOx process will need to be manually restarted to recover services.
Published: 2025-05-07T17:38:10.585Z
Updated: 2025-05-07T19:42:21.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-20076 vulnerable 2026-06-08 05:52:38.828078 Cisco IOx Application Hosting Environment Command Injection Vulnerability
HIGH (7.2)
A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an application. An attacker could exploit this vulnerability by deploying and activating an application in the Cisco IOx application hosting environment with a crafted activation payload file. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying host operating system.
Published: 2023-02-12T00:00:00.000Z
Updated: 2024-10-28T16:34:17.566Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.