Vulnerability · Published Oct 10, 2022 · Assigned by cisco
CVE-2022-20864Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability
Medium 4.6
In plain English
A medium-severity security flaw in Cisco IOS XE Software from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Official description
A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem with the file and boot variable permissions in ROMMON. An attacker could exploit this vulnerability by rebooting the switch into ROMMON and entering specific commands through the console. A successful exploit could allow the attacker to read any file or reset the enable password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco IOS XE Software | n/a |
Weakness: CWE-538 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N