Cisco IC3000 Industrial Compute Gateway vulnerabilities

5 CVEs affecting Cisco IC3000 Industrial Compute Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20076, published 2023-02-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-20076, published 2023-02-12. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This…
CVE-2022-20724, published 2022-04-15. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system,…
CVE-2022-20726, published 2022-04-15. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system,…
CVE-2022-20727, published 2022-04-15. Medium severity, CVSS 6.7. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system,…
CVE-2022-20725, published 2022-04-15. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system,…