CVE:CVE-2023-20076
CNNVD:CNNVD-202302-157
Cisco Iox是美国思科（Cisco）公司的一个结合了Cisco IOS和Linux OS用于安全网络连接以及开发IOT应用的安全开发环境。
Cisco Iox存在安全漏洞，该漏洞源于为激活应用程序而传入的参数未完全清理，攻击者利用该漏洞可以以root用户身份在底层主机操作系统上执行任意命令。
solution:Upgrade cisco ic3000_industrial_compute_gateway to a higher version than 1.4.2,and avoid the version (,1.4.2); Upgrade cisco iox to a higher version than -; Upgrade cisco ios_xe to a higher version than 17.6.5,17.9.2,17.10.0,and avoid the version (,17.6.5),[17.9.0,17.9.2),17.10.0; Upgrade cisco cgr1240_firmware to a higher version than 1.16.0.1,and avoid the version (,1.16.0.1); Upgrade cisco cgr1000_firmware to a higher version than 1.16.0.1,and avoid the version (,1.16.0.1); Upgrade cisco ir510_wpan_firmware to a higher version than 1.10.0.1,and avoid the version (,1.10.0.1); Upgrade cisco 829_industrial_integrated_services_router_firmware to a higher version than 15.9\(3\,15.9(3m,15.9(3m1,15.9(3m2,15.9(3m2a,15.9(3m3,15.9(3m4,15.9(3m4a,15.9(3m5,15.9(3m6a,15.9(3m6b,and avoid the version (,15.9\(3\)),15.9(3)m,15.9(3)m1,15.9(3)m2,15.9(3)m2a,15.9(3)m3,15.9(3)m4,15.9(3)m4a,15.9(3)m5,15.9(3)m6a,15.9(3)m6b; Upgrade cisco 807_industrial_integrated_services_router_firmware to a higher version than 15.9\(3\,15.9(3m,15.9(3m1,15.9(3m2,15.9(3m2a,15.9(3m3,15.9(3m4,15.9(3m4a,15.9(3m5,15.9(3m6a,15.9(3m6b,and avoid the version (,15.9\(3\)),15.9(3)m,15.9(3)m1,15.9(3)m2,15.9(3)m2a,15.9(3)m3,15.9(3)m4,15.9(3)m4a,15.9(3)m5,15.9(3)m6a,15.9(3)m6b; Upgrade cisco 809_industrial_integrated_services_router_firmware to a higher version than 15.9\(3\,15.9(3m,15.9(3m1,15.9(3m2,15.9(3m2a,15.9(3m3,15.9(3m4,15.9(3m4a,15.9(3m5,15.9(3m6a,15.9(3m6b,and avoid the version (,15.9\(3\)),15.9(3)m,15.9(3)m1,15.9(3)m2,15.9(3)m2a,15.9(3)m3,15.9(3)m4,15.9(3)m4a,15.9(3)m5,15.9(3)m6a,15.9(3)m6b