6.5

CVE-2023-20066

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access resources that are outside the filesystem mountpoint of the web UI. This vulnerability is due to an insufficient security configuration. An attacker could exploit this vulnerability by sending a crafted request to the web UI. A successful exploit could allow the attacker to gain read access to files that are outside the filesystem mountpoint of the web UI. Note: These files are located on a restricted filesystem that is maintained for the web UI. There is no ability to write to any files on this filesystem.

Data is provided by the National Vulnerability Database (NVD)
CiscoIos Xe Version16.12.3
   Cisco1000 Integrated Services Router Version-
   Cisco1100-4g Integrated Services Router Version-
   Cisco1100-4p Integrated Services Router Version-
   Cisco1100-6g Integrated Services Router Version-
   Cisco1100-8p Integrated Services Router Version-
   Cisco1100 Integrated Services Router Version-
   Cisco1101-4p Integrated Services Router Version-
   Cisco1101 Integrated Services Router Version-
   Cisco1109-2p Integrated Services Router Version-
   Cisco1109-4p Integrated Services Router Version-
   Cisco1109 Integrated Services Router Version-
   Cisco1111x-8p Integrated Services Router Version-
   Cisco1111x Integrated Services Router Version-
   Cisco111x Integrated Services Router Version-
   Cisco1120 Integrated Services Router Version-
   Cisco1131 Integrated Services Router Version-
   Cisco1160 Integrated Services Router Version-
   Cisco4000 Integrated Services Router Version-
   Cisco4221 Integrated Services Router Version-
   Cisco4321 Integrated Services Router Version-
   Cisco4331 Integrated Services Router Version-
   Cisco4351 Integrated Services Router Version-
   Cisco4431 Integrated Services Router Version-
   Cisco4451-x Integrated Services Router Version-
   Cisco4451 Integrated Services Router Version-
   Cisco4461 Integrated Services Router Version-
   Cisco8101-32fh Version-
   Cisco8101-32h Version-
   Cisco8102-64h Version-
   Cisco8201 Version-
   Cisco8201-32fh Version-
   Cisco8202 Version-
   Cisco8800 12-slot Version-
   Cisco8800 18-slot Version-
   Cisco8800 4-slot Version-
   Cisco8800 8-slot Version-
   Cisco8804 Version-
   Cisco8808 Version-
   Cisco8812 Version-
   Cisco8818 Version-
   Cisco8831 Version-
   Cisco9800-40 Version-
   Cisco9800-80 Version-
   Cisco9800-cl Version-
   Cisco9800-l Version-
   CiscoAsr 1000 Version-
   CiscoAsr 1000-esp100 Version-
   CiscoAsr 1000-esp100-x Version-
   CiscoAsr 1000-esp200-x Version-
   CiscoAsr 1001 Version-
   CiscoAsr 1001-hx Version-
   CiscoAsr 1001-hx R Version-
   CiscoAsr 1001-x Version-
   CiscoAsr 1001-x R Version-
   CiscoAsr 1002 Version-
   CiscoAsr 1002-hx Version-
   CiscoAsr 1002-hx R Version-
   CiscoAsr 1002-x Version-
   CiscoAsr 1002-x R Version-
   CiscoAsr 1004 Version-
   CiscoAsr 1006 Version-
   CiscoAsr 1006-x Version-
   CiscoAsr 1009-x Version-
   CiscoAsr 1013 Version-
   CiscoAsr 1023 Version-
   CiscoAsr 900 Version-
   CiscoAsr 9000 Version-
   CiscoAsr 9000v Version-
   CiscoAsr 9000v Versionv2
   CiscoAsr 9001 Version-
   CiscoAsr 9006 Version-
   CiscoAsr 901-12c-f-d Version-
   CiscoAsr 901-12c-ft-d Version-
   CiscoAsr 901-4c-f-d Version-
   CiscoAsr 901-4c-ft-d Version-
   CiscoAsr 901-6cz-f-a Version-
   CiscoAsr 901-6cz-f-d Version-
   CiscoAsr 901-6cz-fs-a Version-
   CiscoAsr 901-6cz-fs-d Version-
   CiscoAsr 901-6cz-ft-a Version-
   CiscoAsr 901-6cz-ft-d Version-
   CiscoAsr 9010 Version-
   CiscoAsr 901s-2sg-f-ah Version-
   CiscoAsr 901s-2sg-f-d Version-
   CiscoAsr 901s-3sg-f-ah Version-
   CiscoAsr 901s-3sg-f-d Version-
   CiscoAsr 901s-4sg-f-d Version-
   CiscoAsr 902 Version-
   CiscoAsr 902u Version-
   CiscoAsr 903 Version-
   CiscoAsr 907 Version-
   CiscoAsr 914 Version-
   CiscoAsr 920-10sz-pd Version-
   CiscoAsr 920-10sz-pd R Version-
   CiscoAsr 920-12cz-a Version-
   CiscoAsr 920-12cz-a R Version-
   CiscoAsr 920-12cz-d Version-
   CiscoAsr 920-12cz-d R Version-
   CiscoAsr 920-12sz-im Version-
   CiscoAsr 920-12sz-im R Version-
   CiscoAsr 920-24sz-im Version-
   CiscoAsr 920-24sz-im R Version-
   CiscoAsr 920-24sz-m Version-
   CiscoAsr 920-24sz-m R Version-
   CiscoAsr 920-24tz-m Version-
   CiscoAsr 920-24tz-m R Version-
   CiscoAsr 920-4sz-a Version-
   CiscoAsr 920-4sz-a R Version-
   CiscoAsr 920-4sz-d Version-
   CiscoAsr 920-4sz-d R Version-
   CiscoAsr 920u-12sz-im Version-
   CiscoAsr 9901 Version-
   CiscoAsr 9902 Version-
   CiscoAsr 9903 Version-
   CiscoAsr 9904 Version-
   CiscoAsr 9906 Version-
   CiscoAsr 9910 Version-
   CiscoAsr 9912 Version-
   CiscoAsr 9920 Version-
   CiscoAsr 9922 Version-
   CiscoCatalyst 3850 Version-
   CiscoCatalyst 3850-12s-e Version-
   CiscoCatalyst 3850-12s-s Version-
   CiscoCatalyst 3850-12x48u Version-
   CiscoCatalyst 3850-12xs-e Version-
   CiscoCatalyst 3850-12xs-s Version-
   CiscoCatalyst 3850-16xs-e Version-
   CiscoCatalyst 3850-16xs-s Version-
   CiscoCatalyst 3850-24p-e Version-
   CiscoCatalyst 3850-24p-l Version-
   CiscoCatalyst 3850-24p-s Version-
   CiscoCatalyst 3850-24pw-s Version-
   CiscoCatalyst 3850-24s-e Version-
   CiscoCatalyst 3850-24s-s Version-
   CiscoCatalyst 3850-24t-e Version-
   CiscoCatalyst 3850-24t-l Version-
   CiscoCatalyst 3850-24t-s Version-
   CiscoCatalyst 3850-24u Version-
   CiscoCatalyst 3850-24u-e Version-
   CiscoCatalyst 3850-24u-l Version-
   CiscoCatalyst 3850-24u-s Version-
   CiscoCatalyst 3850-24xs Version-
   CiscoCatalyst 3850-24xs-e Version-
   CiscoCatalyst 3850-24xs-s Version-
   CiscoCatalyst 3850-24xu Version-
   CiscoCatalyst 3850-24xu-e Version-
   CiscoCatalyst 3850-24xu-l Version-
   CiscoCatalyst 3850-24xu-s Version-
   CiscoCatalyst 3850-32xs-e Version-
   CiscoCatalyst 3850-32xs-s Version-
   CiscoCatalyst 3850-48f-e Version-
   CiscoCatalyst 3850-48f-l Version-
   CiscoCatalyst 3850-48f-s Version-
   CiscoCatalyst 3850-48p-e Version-
   CiscoCatalyst 3850-48p-l Version-
   CiscoCatalyst 3850-48p-s Version-
   CiscoCatalyst 3850-48pw-s Version-
   CiscoCatalyst 3850-48t-e Version-
   CiscoCatalyst 3850-48t-l Version-
   CiscoCatalyst 3850-48t-s Version-
   CiscoCatalyst 3850-48u Version-
   CiscoCatalyst 3850-48u-e Version-
   CiscoCatalyst 3850-48u-l Version-
   CiscoCatalyst 3850-48u-s Version-
   CiscoCatalyst 3850-48xs Version-
   CiscoCatalyst 3850-48xs-e Version-
   CiscoCatalyst 3850-48xs-f-e Version-
   CiscoCatalyst 3850-48xs-f-s Version-
   CiscoCatalyst 3850-48xs-s Version-
   CiscoCatalyst 3850-nm-2-40g Version-
   CiscoCatalyst 3850-nm-8-10g Version-
   CiscoCatalyst 8200 Version-
   CiscoCatalyst 8300 Version-
   CiscoCatalyst 8300-1n1s-4t2x Version-
   CiscoCatalyst 8300-1n1s-6t Version-
   CiscoCatalyst 8300-2n2s-4t2x Version-
   CiscoCatalyst 8300-2n2s-6t Version-
   CiscoCatalyst 8500 Version-
   CiscoCatalyst 8500-4qc Version-
   CiscoCatalyst 8500l Version-
   CiscoCatalyst 8510csr Version-
   CiscoCatalyst 8510msr Version-
   CiscoCatalyst 8540csr Version-
   CiscoCatalyst 8540msr Version-
   CiscoCatalyst 9200 Version-
   CiscoCatalyst 9200cx Version-
   CiscoCatalyst 9200l Version-
   CiscoCatalyst 9300 Version-
   CiscoCatalyst 9300-24p-a Version-
   CiscoCatalyst 9300-24p-e Version-
   CiscoCatalyst 9300-24s-a Version-
   CiscoCatalyst 9300-24s-e Version-
   CiscoCatalyst 9300-24t-a Version-
   CiscoCatalyst 9300-24t-e Version-
   CiscoCatalyst 9300-24u-a Version-
   CiscoCatalyst 9300-24u-e Version-
   CiscoCatalyst 9300-24ux-a Version-
   CiscoCatalyst 9300-24ux-e Version-
   CiscoCatalyst 9300-48p-a Version-
   CiscoCatalyst 9300-48p-e Version-
   CiscoCatalyst 9300-48s-a Version-
   CiscoCatalyst 9300-48s-e Version-
   CiscoCatalyst 9300-48t-a Version-
   CiscoCatalyst 9300-48t-e Version-
   CiscoCatalyst 9300-48u-a Version-
   CiscoCatalyst 9300-48u-e Version-
   CiscoCatalyst 9300-48un-a Version-
   CiscoCatalyst 9300-48un-e Version-
   CiscoCatalyst 9300-48uxm-a Version-
   CiscoCatalyst 9300-48uxm-e Version-
   CiscoCatalyst 9300l Version-
   CiscoCatalyst 9300l-24p-4g-a Version-
   CiscoCatalyst 9300l-24p-4g-e Version-
   CiscoCatalyst 9300l-24p-4x-a Version-
   CiscoCatalyst 9300l-24p-4x-e Version-
   CiscoCatalyst 9300l-24t-4g-a Version-
   CiscoCatalyst 9300l-24t-4g-e Version-
   CiscoCatalyst 9300l-24t-4x-a Version-
   CiscoCatalyst 9300l-24t-4x-e Version-
   CiscoCatalyst 9300l-48p-4g-a Version-
   CiscoCatalyst 9300l-48p-4g-e Version-
   CiscoCatalyst 9300l-48p-4x-a Version-
   CiscoCatalyst 9300l-48p-4x-e Version-
   CiscoCatalyst 9300l-48t-4g-a Version-
   CiscoCatalyst 9300l-48t-4g-e Version-
   CiscoCatalyst 9300l-48t-4x-a Version-
   CiscoCatalyst 9300l-48t-4x-e Version-
   CiscoCatalyst 9300l Stack Version-
   CiscoCatalyst 9300lm Version-
   CiscoCatalyst 9300x Version-
   CiscoCatalyst 9400 Version-
   CiscoCatalyst 9400 Supervisor Engine-1 Version-
   CiscoCatalyst 9407r Version-
   CiscoCatalyst 9410r Version-
   CiscoCatalyst 9500 Version-
   CiscoCatalyst 9500h Version-
   CiscoCatalyst 9600 Version-
   CiscoCatalyst 9600 Supervisor Engine-1 Version-
   CiscoCatalyst 9600x Version-
   CiscoCatalyst 9800 Version-
   CiscoCatalyst 9800-40 Version-
   CiscoCatalyst 9800-40 Wireless Controller Version-
   CiscoCatalyst 9800-80 Version-
   CiscoCatalyst 9800-80 Wireless Controller Version-
   CiscoCatalyst 9800-cl Version-
   CiscoCatalyst 9800-l Version-
   CiscoCatalyst 9800-l-c Version-
   CiscoCatalyst 9800-l-f Version-
   CiscoCatalyst 9800 Embedded Wireless Controller Version-
   CiscoCatalyst Ie3200 Version-
   CiscoCatalyst Ie3200 Rugged Switch Version-
   CiscoCatalyst Ie3300 Version-
   CiscoCatalyst Ie3300 Rugged Switch Version-
   CiscoCatalyst Ie3400 Version-
   CiscoCatalyst Ie3400 Heavy Duty Switch Version-
   CiscoCatalyst Ie3400 Rugged Switch Version-
   CiscoCatalyst Ie9300 Version-
   CiscoCbr-8 Version-
   CiscoCg418-e Version-
   CiscoCg522-e Version-
   CiscoEsr6300 Version-
   CiscoEss-3300-24t-con-a Version-
   CiscoEss-3300-24t-con-e Version-
   CiscoEss-3300-24t-ncp-a Version-
   CiscoEss-3300-24t-ncp-e Version-
   CiscoEss-3300-con-a Version-
   CiscoEss-3300-con-e Version-
   CiscoEss-3300-ncp-a Version-
   CiscoEss-3300-ncp-e Version-
   CiscoEss9300-10x-e Version-
   CiscoIntegrated Services Virtual Router Version-
CiscoIos Xe Version17.3.2
   Cisco1000 Integrated Services Router Version-
   Cisco1100-4g Integrated Services Router Version-
   Cisco1100-4p Integrated Services Router Version-
   Cisco1100-6g Integrated Services Router Version-
   Cisco1100-8p Integrated Services Router Version-
   Cisco1100 Integrated Services Router Version-
   Cisco1101-4p Integrated Services Router Version-
   Cisco1101 Integrated Services Router Version-
   Cisco1109-2p Integrated Services Router Version-
   Cisco1109-4p Integrated Services Router Version-
   Cisco1109 Integrated Services Router Version-
   Cisco1111x-8p Integrated Services Router Version-
   Cisco1111x Integrated Services Router Version-
   Cisco111x Integrated Services Router Version-
   Cisco1120 Integrated Services Router Version-
   Cisco1131 Integrated Services Router Version-
   Cisco1160 Integrated Services Router Version-
   Cisco4000 Integrated Services Router Version-
   Cisco4221 Integrated Services Router Version-
   Cisco4321 Integrated Services Router Version-
   Cisco4331 Integrated Services Router Version-
   Cisco4351 Integrated Services Router Version-
   Cisco4431 Integrated Services Router Version-
   Cisco4451-x Integrated Services Router Version-
   Cisco4451 Integrated Services Router Version-
   Cisco4461 Integrated Services Router Version-
   Cisco8101-32fh Version-
   Cisco8101-32h Version-
   Cisco8102-64h Version-
   Cisco8201 Version-
   Cisco8201-32fh Version-
   Cisco8202 Version-
   Cisco8800 12-slot Version-
   Cisco8800 18-slot Version-
   Cisco8800 4-slot Version-
   Cisco8800 8-slot Version-
   Cisco8804 Version-
   Cisco8808 Version-
   Cisco8812 Version-
   Cisco8818 Version-
   Cisco8831 Version-
   Cisco9800-40 Version-
   Cisco9800-80 Version-
   Cisco9800-cl Version-
   Cisco9800-l Version-
   CiscoAsr 1000 Version-
   CiscoAsr 1000-esp100 Version-
   CiscoAsr 1000-esp100-x Version-
   CiscoAsr 1000-esp200-x Version-
   CiscoAsr 1001 Version-
   CiscoAsr 1001-hx Version-
   CiscoAsr 1001-hx R Version-
   CiscoAsr 1001-x Version-
   CiscoAsr 1001-x R Version-
   CiscoAsr 1002 Version-
   CiscoAsr 1002-hx Version-
   CiscoAsr 1002-hx R Version-
   CiscoAsr 1002-x Version-
   CiscoAsr 1002-x R Version-
   CiscoAsr 1004 Version-
   CiscoAsr 1006 Version-
   CiscoAsr 1006-x Version-
   CiscoAsr 1009-x Version-
   CiscoAsr 1013 Version-
   CiscoAsr 1023 Version-
   CiscoAsr 900 Version-
   CiscoAsr 9000 Version-
   CiscoAsr 9000v Version-
   CiscoAsr 9000v Versionv2
   CiscoAsr 9001 Version-
   CiscoAsr 9006 Version-
   CiscoAsr 901-12c-f-d Version-
   CiscoAsr 901-12c-ft-d Version-
   CiscoAsr 901-4c-f-d Version-
   CiscoAsr 901-4c-ft-d Version-
   CiscoAsr 901-6cz-f-a Version-
   CiscoAsr 901-6cz-f-d Version-
   CiscoAsr 901-6cz-fs-a Version-
   CiscoAsr 901-6cz-fs-d Version-
   CiscoAsr 901-6cz-ft-a Version-
   CiscoAsr 901-6cz-ft-d Version-
   CiscoAsr 9010 Version-
   CiscoAsr 901s-2sg-f-ah Version-
   CiscoAsr 901s-2sg-f-d Version-
   CiscoAsr 901s-3sg-f-ah Version-
   CiscoAsr 901s-3sg-f-d Version-
   CiscoAsr 901s-4sg-f-d Version-
   CiscoAsr 902 Version-
   CiscoAsr 902u Version-
   CiscoAsr 903 Version-
   CiscoAsr 907 Version-
   CiscoAsr 914 Version-
   CiscoAsr 920-10sz-pd Version-
   CiscoAsr 920-10sz-pd R Version-
   CiscoAsr 920-12cz-a Version-
   CiscoAsr 920-12cz-a R Version-
   CiscoAsr 920-12cz-d Version-
   CiscoAsr 920-12cz-d R Version-
   CiscoAsr 920-12sz-im Version-
   CiscoAsr 920-12sz-im R Version-
   CiscoAsr 920-24sz-im Version-
   CiscoAsr 920-24sz-im R Version-
   CiscoAsr 920-24sz-m Version-
   CiscoAsr 920-24sz-m R Version-
   CiscoAsr 920-24tz-m Version-
   CiscoAsr 920-24tz-m R Version-
   CiscoAsr 920-4sz-a Version-
   CiscoAsr 920-4sz-a R Version-
   CiscoAsr 920-4sz-d Version-
   CiscoAsr 920-4sz-d R Version-
   CiscoAsr 920u-12sz-im Version-
   CiscoAsr 9901 Version-
   CiscoAsr 9902 Version-
   CiscoAsr 9903 Version-
   CiscoAsr 9904 Version-
   CiscoAsr 9906 Version-
   CiscoAsr 9910 Version-
   CiscoAsr 9912 Version-
   CiscoAsr 9920 Version-
   CiscoAsr 9922 Version-
   CiscoCatalyst 3850 Version-
   CiscoCatalyst 3850-12s-e Version-
   CiscoCatalyst 3850-12s-s Version-
   CiscoCatalyst 3850-12x48u Version-
   CiscoCatalyst 3850-12xs-e Version-
   CiscoCatalyst 3850-12xs-s Version-
   CiscoCatalyst 3850-16xs-e Version-
   CiscoCatalyst 3850-16xs-s Version-
   CiscoCatalyst 3850-24p-e Version-
   CiscoCatalyst 3850-24p-l Version-
   CiscoCatalyst 3850-24p-s Version-
   CiscoCatalyst 3850-24pw-s Version-
   CiscoCatalyst 3850-24s-e Version-
   CiscoCatalyst 3850-24s-s Version-
   CiscoCatalyst 3850-24t-e Version-
   CiscoCatalyst 3850-24t-l Version-
   CiscoCatalyst 3850-24t-s Version-
   CiscoCatalyst 3850-24u Version-
   CiscoCatalyst 3850-24u-e Version-
   CiscoCatalyst 3850-24u-l Version-
   CiscoCatalyst 3850-24u-s Version-
   CiscoCatalyst 3850-24xs Version-
   CiscoCatalyst 3850-24xs-e Version-
   CiscoCatalyst 3850-24xs-s Version-
   CiscoCatalyst 3850-24xu Version-
   CiscoCatalyst 3850-24xu-e Version-
   CiscoCatalyst 3850-24xu-l Version-
   CiscoCatalyst 3850-24xu-s Version-
   CiscoCatalyst 3850-32xs-e Version-
   CiscoCatalyst 3850-32xs-s Version-
   CiscoCatalyst 3850-48f-e Version-
   CiscoCatalyst 3850-48f-l Version-
   CiscoCatalyst 3850-48f-s Version-
   CiscoCatalyst 3850-48p-e Version-
   CiscoCatalyst 3850-48p-l Version-
   CiscoCatalyst 3850-48p-s Version-
   CiscoCatalyst 3850-48pw-s Version-
   CiscoCatalyst 3850-48t-e Version-
   CiscoCatalyst 3850-48t-l Version-
   CiscoCatalyst 3850-48t-s Version-
   CiscoCatalyst 3850-48u Version-
   CiscoCatalyst 3850-48u-e Version-
   CiscoCatalyst 3850-48u-l Version-
   CiscoCatalyst 3850-48u-s Version-
   CiscoCatalyst 3850-48xs Version-
   CiscoCatalyst 3850-48xs-e Version-
   CiscoCatalyst 3850-48xs-f-e Version-
   CiscoCatalyst 3850-48xs-f-s Version-
   CiscoCatalyst 3850-48xs-s Version-
   CiscoCatalyst 3850-nm-2-40g Version-
   CiscoCatalyst 3850-nm-8-10g Version-
   CiscoCatalyst 8200 Version-
   CiscoCatalyst 8300 Version-
   CiscoCatalyst 8300-1n1s-4t2x Version-
   CiscoCatalyst 8300-1n1s-6t Version-
   CiscoCatalyst 8300-2n2s-4t2x Version-
   CiscoCatalyst 8300-2n2s-6t Version-
   CiscoCatalyst 8500 Version-
   CiscoCatalyst 8500-4qc Version-
   CiscoCatalyst 8500l Version-
   CiscoCatalyst 8510csr Version-
   CiscoCatalyst 8510msr Version-
   CiscoCatalyst 8540csr Version-
   CiscoCatalyst 8540msr Version-
   CiscoCatalyst 9200 Version-
   CiscoCatalyst 9200cx Version-
   CiscoCatalyst 9200l Version-
   CiscoCatalyst 9300 Version-
   CiscoCatalyst 9300-24p-a Version-
   CiscoCatalyst 9300-24p-e Version-
   CiscoCatalyst 9300-24s-a Version-
   CiscoCatalyst 9300-24s-e Version-
   CiscoCatalyst 9300-24t-a Version-
   CiscoCatalyst 9300-24t-e Version-
   CiscoCatalyst 9300-24u-a Version-
   CiscoCatalyst 9300-24u-e Version-
   CiscoCatalyst 9300-24ux-a Version-
   CiscoCatalyst 9300-24ux-e Version-
   CiscoCatalyst 9300-48p-a Version-
   CiscoCatalyst 9300-48p-e Version-
   CiscoCatalyst 9300-48s-a Version-
   CiscoCatalyst 9300-48s-e Version-
   CiscoCatalyst 9300-48t-a Version-
   CiscoCatalyst 9300-48t-e Version-
   CiscoCatalyst 9300-48u-a Version-
   CiscoCatalyst 9300-48u-e Version-
   CiscoCatalyst 9300-48un-a Version-
   CiscoCatalyst 9300-48un-e Version-
   CiscoCatalyst 9300-48uxm-a Version-
   CiscoCatalyst 9300-48uxm-e Version-
   CiscoCatalyst 9300l Version-
   CiscoCatalyst 9300l-24p-4g-a Version-
   CiscoCatalyst 9300l-24p-4g-e Version-
   CiscoCatalyst 9300l-24p-4x-a Version-
   CiscoCatalyst 9300l-24p-4x-e Version-
   CiscoCatalyst 9300l-24t-4g-a Version-
   CiscoCatalyst 9300l-24t-4g-e Version-
   CiscoCatalyst 9300l-24t-4x-a Version-
   CiscoCatalyst 9300l-24t-4x-e Version-
   CiscoCatalyst 9300l-48p-4g-a Version-
   CiscoCatalyst 9300l-48p-4g-e Version-
   CiscoCatalyst 9300l-48p-4x-a Version-
   CiscoCatalyst 9300l-48p-4x-e Version-
   CiscoCatalyst 9300l-48t-4g-a Version-
   CiscoCatalyst 9300l-48t-4g-e Version-
   CiscoCatalyst 9300l-48t-4x-a Version-
   CiscoCatalyst 9300l-48t-4x-e Version-
   CiscoCatalyst 9300l Stack Version-
   CiscoCatalyst 9300lm Version-
   CiscoCatalyst 9300x Version-
   CiscoCatalyst 9400 Version-
   CiscoCatalyst 9400 Supervisor Engine-1 Version-
   CiscoCatalyst 9407r Version-
   CiscoCatalyst 9410r Version-
   CiscoCatalyst 9500 Version-
   CiscoCatalyst 9500h Version-
   CiscoCatalyst 9600 Version-
   CiscoCatalyst 9600 Supervisor Engine-1 Version-
   CiscoCatalyst 9600x Version-
   CiscoCatalyst 9800 Version-
   CiscoCatalyst 9800-40 Version-
   CiscoCatalyst 9800-40 Wireless Controller Version-
   CiscoCatalyst 9800-80 Version-
   CiscoCatalyst 9800-80 Wireless Controller Version-
   CiscoCatalyst 9800-cl Version-
   CiscoCatalyst 9800-l Version-
   CiscoCatalyst 9800-l-c Version-
   CiscoCatalyst 9800-l-f Version-
   CiscoCatalyst 9800 Embedded Wireless Controller Version-
   CiscoCatalyst Ie3200 Version-
   CiscoCatalyst Ie3200 Rugged Switch Version-
   CiscoCatalyst Ie3300 Version-
   CiscoCatalyst Ie3300 Rugged Switch Version-
   CiscoCatalyst Ie3400 Version-
   CiscoCatalyst Ie3400 Heavy Duty Switch Version-
   CiscoCatalyst Ie3400 Rugged Switch Version-
   CiscoCatalyst Ie9300 Version-
   CiscoCbr-8 Version-
   CiscoCg418-e Version-
   CiscoCg522-e Version-
   CiscoEsr6300 Version-
   CiscoEss-3300-24t-con-a Version-
   CiscoEss-3300-24t-con-e Version-
   CiscoEss-3300-24t-ncp-a Version-
   CiscoEss-3300-24t-ncp-e Version-
   CiscoEss-3300-con-a Version-
   CiscoEss-3300-con-e Version-
   CiscoEss-3300-ncp-a Version-
   CiscoEss-3300-ncp-e Version-
   CiscoEss9300-10x-e Version-
   CiscoIntegrated Services Virtual Router Version-
CiscoIos Xe Version17.6.2
   Cisco1000 Integrated Services Router Version-
   Cisco1100-4g Integrated Services Router Version-
   Cisco1100-4p Integrated Services Router Version-
   Cisco1100-6g Integrated Services Router Version-
   Cisco1100-8p Integrated Services Router Version-
   Cisco1100 Integrated Services Router Version-
   Cisco1101-4p Integrated Services Router Version-
   Cisco1101 Integrated Services Router Version-
   Cisco1109-2p Integrated Services Router Version-
   Cisco1109-4p Integrated Services Router Version-
   Cisco1109 Integrated Services Router Version-
   Cisco1111x-8p Integrated Services Router Version-
   Cisco1111x Integrated Services Router Version-
   Cisco111x Integrated Services Router Version-
   Cisco1120 Integrated Services Router Version-
   Cisco1131 Integrated Services Router Version-
   Cisco1160 Integrated Services Router Version-
   Cisco4000 Integrated Services Router Version-
   Cisco4221 Integrated Services Router Version-
   Cisco4321 Integrated Services Router Version-
   Cisco4331 Integrated Services Router Version-
   Cisco4351 Integrated Services Router Version-
   Cisco4431 Integrated Services Router Version-
   Cisco4451-x Integrated Services Router Version-
   Cisco4451 Integrated Services Router Version-
   Cisco4461 Integrated Services Router Version-
   Cisco8101-32fh Version-
   Cisco8101-32h Version-
   Cisco8102-64h Version-
   Cisco8201 Version-
   Cisco8201-32fh Version-
   Cisco8202 Version-
   Cisco8800 12-slot Version-
   Cisco8800 18-slot Version-
   Cisco8800 4-slot Version-
   Cisco8800 8-slot Version-
   Cisco8804 Version-
   Cisco8808 Version-
   Cisco8812 Version-
   Cisco8818 Version-
   Cisco8831 Version-
   Cisco9800-40 Version-
   Cisco9800-80 Version-
   Cisco9800-cl Version-
   Cisco9800-l Version-
   CiscoAsr 1000 Version-
   CiscoAsr 1000-esp100 Version-
   CiscoAsr 1000-esp100-x Version-
   CiscoAsr 1000-esp200-x Version-
   CiscoAsr 1001 Version-
   CiscoAsr 1001-hx Version-
   CiscoAsr 1001-hx R Version-
   CiscoAsr 1001-x Version-
   CiscoAsr 1001-x R Version-
   CiscoAsr 1002 Version-
   CiscoAsr 1002-hx Version-
   CiscoAsr 1002-hx R Version-
   CiscoAsr 1002-x Version-
   CiscoAsr 1002-x R Version-
   CiscoAsr 1004 Version-
   CiscoAsr 1006 Version-
   CiscoAsr 1006-x Version-
   CiscoAsr 1009-x Version-
   CiscoAsr 1013 Version-
   CiscoAsr 1023 Version-
   CiscoAsr 900 Version-
   CiscoAsr 9000 Version-
   CiscoAsr 9000v Version-
   CiscoAsr 9000v Versionv2
   CiscoAsr 9001 Version-
   CiscoAsr 9006 Version-
   CiscoAsr 901-12c-f-d Version-
   CiscoAsr 901-12c-ft-d Version-
   CiscoAsr 901-4c-f-d Version-
   CiscoAsr 901-4c-ft-d Version-
   CiscoAsr 901-6cz-f-a Version-
   CiscoAsr 901-6cz-f-d Version-
   CiscoAsr 901-6cz-fs-a Version-
   CiscoAsr 901-6cz-fs-d Version-
   CiscoAsr 901-6cz-ft-a Version-
   CiscoAsr 901-6cz-ft-d Version-
   CiscoAsr 9010 Version-
   CiscoAsr 901s-2sg-f-ah Version-
   CiscoAsr 901s-2sg-f-d Version-
   CiscoAsr 901s-3sg-f-ah Version-
   CiscoAsr 901s-3sg-f-d Version-
   CiscoAsr 901s-4sg-f-d Version-
   CiscoAsr 902 Version-
   CiscoAsr 902u Version-
   CiscoAsr 903 Version-
   CiscoAsr 907 Version-
   CiscoAsr 914 Version-
   CiscoAsr 920-10sz-pd Version-
   CiscoAsr 920-10sz-pd R Version-
   CiscoAsr 920-12cz-a Version-
   CiscoAsr 920-12cz-a R Version-
   CiscoAsr 920-12cz-d Version-
   CiscoAsr 920-12cz-d R Version-
   CiscoAsr 920-12sz-im Version-
   CiscoAsr 920-12sz-im R Version-
   CiscoAsr 920-24sz-im Version-
   CiscoAsr 920-24sz-im R Version-
   CiscoAsr 920-24sz-m Version-
   CiscoAsr 920-24sz-m R Version-
   CiscoAsr 920-24tz-m Version-
   CiscoAsr 920-24tz-m R Version-
   CiscoAsr 920-4sz-a Version-
   CiscoAsr 920-4sz-a R Version-
   CiscoAsr 920-4sz-d Version-
   CiscoAsr 920-4sz-d R Version-
   CiscoAsr 920u-12sz-im Version-
   CiscoAsr 9901 Version-
   CiscoAsr 9902 Version-
   CiscoAsr 9903 Version-
   CiscoAsr 9904 Version-
   CiscoAsr 9906 Version-
   CiscoAsr 9910 Version-
   CiscoAsr 9912 Version-
   CiscoAsr 9920 Version-
   CiscoAsr 9922 Version-
   CiscoCatalyst 3850 Version-
   CiscoCatalyst 3850-12s-e Version-
   CiscoCatalyst 3850-12s-s Version-
   CiscoCatalyst 3850-12x48u Version-
   CiscoCatalyst 3850-12xs-e Version-
   CiscoCatalyst 3850-12xs-s Version-
   CiscoCatalyst 3850-16xs-e Version-
   CiscoCatalyst 3850-16xs-s Version-
   CiscoCatalyst 3850-24p-e Version-
   CiscoCatalyst 3850-24p-l Version-
   CiscoCatalyst 3850-24p-s Version-
   CiscoCatalyst 3850-24pw-s Version-
   CiscoCatalyst 3850-24s-e Version-
   CiscoCatalyst 3850-24s-s Version-
   CiscoCatalyst 3850-24t-e Version-
   CiscoCatalyst 3850-24t-l Version-
   CiscoCatalyst 3850-24t-s Version-
   CiscoCatalyst 3850-24u Version-
   CiscoCatalyst 3850-24u-e Version-
   CiscoCatalyst 3850-24u-l Version-
   CiscoCatalyst 3850-24u-s Version-
   CiscoCatalyst 3850-24xs Version-
   CiscoCatalyst 3850-24xs-e Version-
   CiscoCatalyst 3850-24xs-s Version-
   CiscoCatalyst 3850-24xu Version-
   CiscoCatalyst 3850-24xu-e Version-
   CiscoCatalyst 3850-24xu-l Version-
   CiscoCatalyst 3850-24xu-s Version-
   CiscoCatalyst 3850-32xs-e Version-
   CiscoCatalyst 3850-32xs-s Version-
   CiscoCatalyst 3850-48f-e Version-
   CiscoCatalyst 3850-48f-l Version-
   CiscoCatalyst 3850-48f-s Version-
   CiscoCatalyst 3850-48p-e Version-
   CiscoCatalyst 3850-48p-l Version-
   CiscoCatalyst 3850-48p-s Version-
   CiscoCatalyst 3850-48pw-s Version-
   CiscoCatalyst 3850-48t-e Version-
   CiscoCatalyst 3850-48t-l Version-
   CiscoCatalyst 3850-48t-s Version-
   CiscoCatalyst 3850-48u Version-
   CiscoCatalyst 3850-48u-e Version-
   CiscoCatalyst 3850-48u-l Version-
   CiscoCatalyst 3850-48u-s Version-
   CiscoCatalyst 3850-48xs Version-
   CiscoCatalyst 3850-48xs-e Version-
   CiscoCatalyst 3850-48xs-f-e Version-
   CiscoCatalyst 3850-48xs-f-s Version-
   CiscoCatalyst 3850-48xs-s Version-
   CiscoCatalyst 3850-nm-2-40g Version-
   CiscoCatalyst 3850-nm-8-10g Version-
   CiscoCatalyst 8200 Version-
   CiscoCatalyst 8300 Version-
   CiscoCatalyst 8300-1n1s-4t2x Version-
   CiscoCatalyst 8300-1n1s-6t Version-
   CiscoCatalyst 8300-2n2s-4t2x Version-
   CiscoCatalyst 8300-2n2s-6t Version-
   CiscoCatalyst 8500 Version-
   CiscoCatalyst 8500-4qc Version-
   CiscoCatalyst 8500l Version-
   CiscoCatalyst 8510csr Version-
   CiscoCatalyst 8510msr Version-
   CiscoCatalyst 8540csr Version-
   CiscoCatalyst 8540msr Version-
   CiscoCatalyst 9200 Version-
   CiscoCatalyst 9200cx Version-
   CiscoCatalyst 9200l Version-
   CiscoCatalyst 9300 Version-
   CiscoCatalyst 9300-24p-a Version-
   CiscoCatalyst 9300-24p-e Version-
   CiscoCatalyst 9300-24s-a Version-
   CiscoCatalyst 9300-24s-e Version-
   CiscoCatalyst 9300-24t-a Version-
   CiscoCatalyst 9300-24t-e Version-
   CiscoCatalyst 9300-24u-a Version-
   CiscoCatalyst 9300-24u-e Version-
   CiscoCatalyst 9300-24ux-a Version-
   CiscoCatalyst 9300-24ux-e Version-
   CiscoCatalyst 9300-48p-a Version-
   CiscoCatalyst 9300-48p-e Version-
   CiscoCatalyst 9300-48s-a Version-
   CiscoCatalyst 9300-48s-e Version-
   CiscoCatalyst 9300-48t-a Version-
   CiscoCatalyst 9300-48t-e Version-
   CiscoCatalyst 9300-48u-a Version-
   CiscoCatalyst 9300-48u-e Version-
   CiscoCatalyst 9300-48un-a Version-
   CiscoCatalyst 9300-48un-e Version-
   CiscoCatalyst 9300-48uxm-a Version-
   CiscoCatalyst 9300-48uxm-e Version-
   CiscoCatalyst 9300l Version-
   CiscoCatalyst 9300l-24p-4g-a Version-
   CiscoCatalyst 9300l-24p-4g-e Version-
   CiscoCatalyst 9300l-24p-4x-a Version-
   CiscoCatalyst 9300l-24p-4x-e Version-
   CiscoCatalyst 9300l-24t-4g-a Version-
   CiscoCatalyst 9300l-24t-4g-e Version-
   CiscoCatalyst 9300l-24t-4x-a Version-
   CiscoCatalyst 9300l-24t-4x-e Version-
   CiscoCatalyst 9300l-48p-4g-a Version-
   CiscoCatalyst 9300l-48p-4g-e Version-
   CiscoCatalyst 9300l-48p-4x-a Version-
   CiscoCatalyst 9300l-48p-4x-e Version-
   CiscoCatalyst 9300l-48t-4g-a Version-
   CiscoCatalyst 9300l-48t-4g-e Version-
   CiscoCatalyst 9300l-48t-4x-a Version-
   CiscoCatalyst 9300l-48t-4x-e Version-
   CiscoCatalyst 9300l Stack Version-
   CiscoCatalyst 9300lm Version-
   CiscoCatalyst 9300x Version-
   CiscoCatalyst 9400 Version-
   CiscoCatalyst 9400 Supervisor Engine-1 Version-
   CiscoCatalyst 9407r Version-
   CiscoCatalyst 9410r Version-
   CiscoCatalyst 9500 Version-
   CiscoCatalyst 9500h Version-
   CiscoCatalyst 9600 Version-
   CiscoCatalyst 9600 Supervisor Engine-1 Version-
   CiscoCatalyst 9600x Version-
   CiscoCatalyst 9800 Version-
   CiscoCatalyst 9800-40 Version-
   CiscoCatalyst 9800-40 Wireless Controller Version-
   CiscoCatalyst 9800-80 Version-
   CiscoCatalyst 9800-80 Wireless Controller Version-
   CiscoCatalyst 9800-cl Version-
   CiscoCatalyst 9800-l Version-
   CiscoCatalyst 9800-l-c Version-
   CiscoCatalyst 9800-l-f Version-
   CiscoCatalyst 9800 Embedded Wireless Controller Version-
   CiscoCatalyst Ie3200 Version-
   CiscoCatalyst Ie3200 Rugged Switch Version-
   CiscoCatalyst Ie3300 Version-
   CiscoCatalyst Ie3300 Rugged Switch Version-
   CiscoCatalyst Ie3400 Version-
   CiscoCatalyst Ie3400 Heavy Duty Switch Version-
   CiscoCatalyst Ie3400 Rugged Switch Version-
   CiscoCatalyst Ie9300 Version-
   CiscoCbr-8 Version-
   CiscoCg418-e Version-
   CiscoCg522-e Version-
   CiscoEsr6300 Version-
   CiscoEss-3300-24t-con-a Version-
   CiscoEss-3300-24t-con-e Version-
   CiscoEss-3300-24t-ncp-a Version-
   CiscoEss-3300-24t-ncp-e Version-
   CiscoEss-3300-con-a Version-
   CiscoEss-3300-con-e Version-
   CiscoEss-3300-ncp-a Version-
   CiscoEss-3300-ncp-e Version-
   CiscoEss9300-10x-e Version-
   CiscoIntegrated Services Virtual Router Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.48% 0.644
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
psirt@cisco.com 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CWE-23 Relative Path Traversal

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.