Is CVE-2023-20076 being actively exploited?

CVE-2023-20076 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2023-20076?

CVE-2023-20076 has a CVSS 3.1 base score of 7.2 (HIGH).

CVE-2023-20076

HIGH · CVSS 7.2EPSS 1.5%EU EUVD

A vulnerability in the Cisco IOx application hosting environment could allow an authenticated, remote attacker to execute arbitrary commands as root on the underlying host operating system. This vulnerability is due to incomplete sanitization of parameters that are passed in for activation of an application. An attacker could exploit this vulnerability by deploying and activating an application in the Cisco IOx application hosting environment with a crafted activation payload file. A successful exploit could allow the attacker to execute arbitrary commands as root on the underlying host operating system.

Key facts

CVSS score: 7.2 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-233
EPSS score: 1.5% (74th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2023-24255)
Published: February 12, 2023
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2023-24255 in the EU Vulnerability Database. Last updated in EUVD on October 28, 2024.

View on the EU Vulnerability Database

Affected products

cisco / 807 industrial integrated services router
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 807 industrial integrated services router firmware
cisco / 809 industrial integrated services router
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 809 industrial integrated services router firmware
cisco / 829 industrial integrated services router
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / 829 industrial integrated services router firmware
cisco / cgr1000
cisco / cgr1000 firmware
cisco / cgr1240
cisco / cgr1240 firmware
cisco / ic3000 industrial compute gateway
cisco / ios xe
cisco / ios xe
cisco / iox
cisco / ir510 wpan
cisco / ir510 wpan firmware

Certified products that may be affected

21 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12 - Cisco Systems, Inc. - FIPS 140 4606 - historical
Cisco Aironet 1562e/i/d/ps, 2802e/i, 3802e/i/p, 4800 and IW6300H- AC/DC/DCW Wireless LAN Access Points, AireOS Version 8.10MR3 and IOS-XE 17.3 - Cisco Systems, Inc. - FIPS 140 4129 - historical
Cisco Aggregation Services Router 1000 Series (ASR1K), Cisco Cloud Services Router 1000V (CSR1000V), Cisco Integrated Services Router 1100 Series (ISR1100), Cisco Integrated Services Router 4200 Series (ISR4K) running IOS-XE 17.3 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11186-2021 - archived
Cisco Catalyst Industrial Ethernet 3x00 Rugged Series (IE3200, IE3300, IE3400, IE3400H) Switches running IOS-XE 17.3 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11177-2021 - archived
Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12 - Cisco Systems, Inc. - FIPS 140 3883 - historical

See all 21 in the Security Certifications Explorer.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-8whGn5dL(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain