4.6

CVE-2022-20864

A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem with the file and boot variable permissions in ROMMON. An attacker could exploit this vulnerability by rebooting the switch into ROMMON and entering specific commands through the console. A successful exploit could allow the attacker to read any file or reset the enable password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Rom Monitor Version-
   Cisco ≫ Catalyst 3650 Version-
   Cisco ≫ Catalyst 3650-12x48fd-e Version-
   Cisco ≫ Catalyst 3650-12x48fd-l Version-
   Cisco ≫ Catalyst 3650-12x48fd-s Version-
   Cisco ≫ Catalyst 3650-12x48uq Version-
   Cisco ≫ Catalyst 3650-12x48uq-e Version-
   Cisco ≫ Catalyst 3650-12x48uq-l Version-
   Cisco ≫ Catalyst 3650-12x48uq-s Version-
   Cisco ≫ Catalyst 3650-12x48ur Version-
   Cisco ≫ Catalyst 3650-12x48ur-e Version-
   Cisco ≫ Catalyst 3650-12x48ur-l Version-
   Cisco ≫ Catalyst 3650-12x48ur-s Version-
   Cisco ≫ Catalyst 3650-12x48uz Version-
   Cisco ≫ Catalyst 3650-12x48uz-e Version-
   Cisco ≫ Catalyst 3650-12x48uz-l Version-
   Cisco ≫ Catalyst 3650-12x48uz-s Version-
   Cisco ≫ Catalyst 3650-24pd Version-
   Cisco ≫ Catalyst 3650-24pd-e Version-
   Cisco ≫ Catalyst 3650-24pd-l Version-
   Cisco ≫ Catalyst 3650-24pd-s Version-
   Cisco ≫ Catalyst 3650-24pdm Version-
   Cisco ≫ Catalyst 3650-24pdm-e Version-
   Cisco ≫ Catalyst 3650-24pdm-l Version-
   Cisco ≫ Catalyst 3650-24pdm-s Version-
   Cisco ≫ Catalyst 3650-24ps-e Version-
   Cisco ≫ Catalyst 3650-24ps-l Version-
   Cisco ≫ Catalyst 3650-24ps-s Version-
   Cisco ≫ Catalyst 3650-24td-e Version-
   Cisco ≫ Catalyst 3650-24td-l Version-
   Cisco ≫ Catalyst 3650-24td-s Version-
   Cisco ≫ Catalyst 3650-24ts-e Version-
   Cisco ≫ Catalyst 3650-24ts-l Version-
   Cisco ≫ Catalyst 3650-24ts-s Version-
   Cisco ≫ Catalyst 3650-48fd-e Version-
   Cisco ≫ Catalyst 3650-48fd-l Version-
   Cisco ≫ Catalyst 3650-48fd-s Version-
   Cisco ≫ Catalyst 3650-48fq Version-
   Cisco ≫ Catalyst 3650-48fq-e Version-
   Cisco ≫ Catalyst 3650-48fq-l Version-
   Cisco ≫ Catalyst 3650-48fq-s Version-
   Cisco ≫ Catalyst 3650-48fqm Version-
   Cisco ≫ Catalyst 3650-48fqm-e Version-
   Cisco ≫ Catalyst 3650-48fqm-l Version-
   Cisco ≫ Catalyst 3650-48fqm-s Version-
   Cisco ≫ Catalyst 3650-48fs-e Version-
   Cisco ≫ Catalyst 3650-48fs-l Version-
   Cisco ≫ Catalyst 3650-48fs-s Version-
   Cisco ≫ Catalyst 3650-48pd-e Version-
   Cisco ≫ Catalyst 3650-48pd-l Version-
   Cisco ≫ Catalyst 3650-48pd-s Version-
   Cisco ≫ Catalyst 3650-48pq-e Version-
   Cisco ≫ Catalyst 3650-48pq-l Version-
   Cisco ≫ Catalyst 3650-48pq-s Version-
   Cisco ≫ Catalyst 3650-48ps-e Version-
   Cisco ≫ Catalyst 3650-48ps-l Version-
   Cisco ≫ Catalyst 3650-48ps-s Version-
   Cisco ≫ Catalyst 3650-48td-e Version-
   Cisco ≫ Catalyst 3650-48td-l Version-
   Cisco ≫ Catalyst 3650-48td-s Version-
   Cisco ≫ Catalyst 3650-48tq-e Version-
   Cisco ≫ Catalyst 3650-48tq-l Version-
   Cisco ≫ Catalyst 3650-48tq-s Version-
   Cisco ≫ Catalyst 3650-48ts-e Version-
   Cisco ≫ Catalyst 3650-48ts-l Version-
   Cisco ≫ Catalyst 3650-48ts-s Version-
   Cisco ≫ Catalyst 3650-8x24pd-e Version-
   Cisco ≫ Catalyst 3650-8x24pd-l Version-
   Cisco ≫ Catalyst 3650-8x24pd-s Version-
   Cisco ≫ Catalyst 3650-8x24uq Version-
   Cisco ≫ Catalyst 3650-8x24uq-e Version-
   Cisco ≫ Catalyst 3650-8x24uq-l Version-
   Cisco ≫ Catalyst 3650-8x24uq-s Version-
   Cisco ≫ Catalyst 3850 Version-
   Cisco ≫ Catalyst 3850-12s-e Version-
   Cisco ≫ Catalyst 3850-12s-s Version-
   Cisco ≫ Catalyst 3850-12x48u Version-
   Cisco ≫ Catalyst 3850-12xs-e Version-
   Cisco ≫ Catalyst 3850-12xs-s Version-
   Cisco ≫ Catalyst 3850-16xs-e Version-
   Cisco ≫ Catalyst 3850-16xs-s Version-
   Cisco ≫ Catalyst 3850-24p-e Version-
   Cisco ≫ Catalyst 3850-24p-l Version-
   Cisco ≫ Catalyst 3850-24p-s Version-
   Cisco ≫ Catalyst 3850-24pw-s Version-
   Cisco ≫ Catalyst 3850-24s-e Version-
   Cisco ≫ Catalyst 3850-24s-s Version-
   Cisco ≫ Catalyst 3850-24t-e Version-
   Cisco ≫ Catalyst 3850-24t-l Version-
   Cisco ≫ Catalyst 3850-24t-s Version-
   Cisco ≫ Catalyst 3850-24u Version-
   Cisco ≫ Catalyst 3850-24u-e Version-
   Cisco ≫ Catalyst 3850-24u-l Version-
   Cisco ≫ Catalyst 3850-24u-s Version-
   Cisco ≫ Catalyst 3850-24xs Version-
   Cisco ≫ Catalyst 3850-24xs-e Version-
   Cisco ≫ Catalyst 3850-24xs-s Version-
   Cisco ≫ Catalyst 3850-24xu Version-
   Cisco ≫ Catalyst 3850-24xu-e Version-
   Cisco ≫ Catalyst 3850-24xu-l Version-
   Cisco ≫ Catalyst 3850-24xu-s Version-
   Cisco ≫ Catalyst 3850-32xs-e Version-
   Cisco ≫ Catalyst 3850-32xs-s Version-
   Cisco ≫ Catalyst 3850-48f-e Version-
   Cisco ≫ Catalyst 3850-48f-l Version-
   Cisco ≫ Catalyst 3850-48f-s Version-
   Cisco ≫ Catalyst 3850-48p-e Version-
   Cisco ≫ Catalyst 3850-48p-l Version-
   Cisco ≫ Catalyst 3850-48p-s Version-
   Cisco ≫ Catalyst 3850-48pw-s Version-
   Cisco ≫ Catalyst 3850-48t-e Version-
   Cisco ≫ Catalyst 3850-48t-l Version-
   Cisco ≫ Catalyst 3850-48t-s Version-
   Cisco ≫ Catalyst 3850-48u Version-
   Cisco ≫ Catalyst 3850-48u-e Version-
   Cisco ≫ Catalyst 3850-48u-l Version-
   Cisco ≫ Catalyst 3850-48u-s Version-
   Cisco ≫ Catalyst 3850-48xs Version-
   Cisco ≫ Catalyst 3850-48xs-e Version-
   Cisco ≫ Catalyst 3850-48xs-f-e Version-
   Cisco ≫ Catalyst 3850-48xs-f-s Version-
   Cisco ≫ Catalyst 3850-48xs-s Version-
   Cisco ≫ Catalyst 3850-nm-2-40g Version-
   Cisco ≫ Catalyst 3850-nm-8-10g Version-
   Cisco ≫ Catalyst 9200 Version-
   Cisco ≫ Catalyst 9200cx Version-
   Cisco ≫ Catalyst 9200l Version-
   Cisco ≫ Catalyst 9300 Version-
   Cisco ≫ Catalyst 9300-24p-a Version-
   Cisco ≫ Catalyst 9300-24p-e Version-
   Cisco ≫ Catalyst 9300-24s-a Version-
   Cisco ≫ Catalyst 9300-24s-e Version-
   Cisco ≫ Catalyst 9300-24t-a Version-
   Cisco ≫ Catalyst 9300-24t-e Version-
   Cisco ≫ Catalyst 9300-24u-a Version-
   Cisco ≫ Catalyst 9300-24u-e Version-
   Cisco ≫ Catalyst 9300-24ux-a Version-
   Cisco ≫ Catalyst 9300-24ux-e Version-
   Cisco ≫ Catalyst 9300-48p-a Version-
   Cisco ≫ Catalyst 9300-48p-e Version-
   Cisco ≫ Catalyst 9300-48s-a Version-
   Cisco ≫ Catalyst 9300-48s-e Version-
   Cisco ≫ Catalyst 9300-48t-a Version-
   Cisco ≫ Catalyst 9300-48t-e Version-
   Cisco ≫ Catalyst 9300-48u-a Version-
   Cisco ≫ Catalyst 9300-48u-e Version-
   Cisco ≫ Catalyst 9300-48un-a Version-
   Cisco ≫ Catalyst 9300-48un-e Version-
   Cisco ≫ Catalyst 9300-48uxm-a Version-
   Cisco ≫ Catalyst 9300-48uxm-e Version-
   Cisco ≫ Catalyst 9300l Version-
   Cisco ≫ Catalyst 9300l-24p-4g-a Version-
   Cisco ≫ Catalyst 9300l-24p-4g-e Version-
   Cisco ≫ Catalyst 9300l-24p-4x-a Version-
   Cisco ≫ Catalyst 9300l-24p-4x-e Version-
   Cisco ≫ Catalyst 9300l-24t-4g-a Version-
   Cisco ≫ Catalyst 9300l-24t-4g-e Version-
   Cisco ≫ Catalyst 9300l-24t-4x-a Version-
   Cisco ≫ Catalyst 9300l-24t-4x-e Version-
   Cisco ≫ Catalyst 9300l-48p-4g-a Version-
   Cisco ≫ Catalyst 9300l-48p-4g-e Version-
   Cisco ≫ Catalyst 9300l-48p-4x-a Version-
   Cisco ≫ Catalyst 9300l-48p-4x-e Version-
   Cisco ≫ Catalyst 9300l-48t-4g-a Version-
   Cisco ≫ Catalyst 9300l-48t-4g-e Version-
   Cisco ≫ Catalyst 9300l-48t-4x-a Version-
   Cisco ≫ Catalyst 9300l-48t-4x-e Version-
   Cisco ≫ Catalyst 9300l Stack Version-
   Cisco ≫ Catalyst 9300lm Version-
   Cisco ≫ Catalyst 9300x Version-
   Cisco ≫ Catalyst 9400 Version-
   Cisco ≫ Catalyst 9407r Version-
   Cisco ≫ Catalyst 9410r Version-
   Cisco ≫ Catalyst 9500 Version-
   Cisco ≫ Catalyst 9500h Version-
   Cisco ≫ Catalyst 9600 Version-
   Cisco ≫ Catalyst 9600x Version-
   Cisco ≫ Catalyst C2928-24lt-c Version-
   Cisco ≫ Catalyst C2928-48tc-c Version-
   Cisco ≫ Catalyst C3850-12x48u-e Version-
   Cisco ≫ Catalyst C3850-12x48u-l Version-
   Cisco ≫ Catalyst C3850-12x48u-s Version-
   Cisco ≫ Catalyst C9200-24p Version-
   Cisco ≫ Catalyst C9200-24t Version-
   Cisco ≫ Catalyst C9200-48p Version-
   Cisco ≫ Catalyst C9200-48t Version-
   Cisco ≫ Catalyst C9200l-24p-4g Version-
   Cisco ≫ Catalyst C9200l-24p-4x Version-
   Cisco ≫ Catalyst C9200l-24pxg-2y Version-
   Cisco ≫ Catalyst C9200l-24pxg-4x Version-
   Cisco ≫ Catalyst C9200l-24t-4g Version-
   Cisco ≫ Catalyst C9200l-24t-4x Version-
   Cisco ≫ Catalyst C9200l-48p-4g Version-
   Cisco ≫ Catalyst C9200l-48p-4x Version-
   Cisco ≫ Catalyst C9200l-48pxg-2y Version-
   Cisco ≫ Catalyst C9200l-48pxg-4x Version-
   Cisco ≫ Catalyst C9200l-48t-4g Version-
   Cisco ≫ Catalyst C9200l-48t-4x Version-
   Cisco ≫ Catalyst C9300-24p Version-
   Cisco ≫ Catalyst C9300-24s Version-
   Cisco ≫ Catalyst C9300-24t Version-
   Cisco ≫ Catalyst C9300-24u Version-
   Cisco ≫ Catalyst C9300-24ux Version-
   Cisco ≫ Catalyst C9300-48p Version-
   Cisco ≫ Catalyst C9300-48s Version-
   Cisco ≫ Catalyst C9300-48t Version-
   Cisco ≫ Catalyst C9300-48u Version-
   Cisco ≫ Catalyst C9300-48un Version-
   Cisco ≫ Catalyst C9300-48uxm Version-
   Cisco ≫ Catalyst C9300l-24p-4g Version-
   Cisco ≫ Catalyst C9300l-24p-4x Version-
   Cisco ≫ Catalyst C9300l-24t-4g Version-
   Cisco ≫ Catalyst C9300l-24t-4x Version-
   Cisco ≫ Catalyst C9300l-48p-4g Version-
   Cisco ≫ Catalyst C9300l-48p-4x Version-
   Cisco ≫ Catalyst C9300l-48t-4g Version-
   Cisco ≫ Catalyst C9300l-48t-4x Version-
   Cisco ≫ Catalyst C9404r Version-
   Cisco ≫ Catalyst C9407r Version-
   Cisco ≫ Catalyst C9410r Version-
   Cisco ≫ Catalyst C9500-12q Version-
   Cisco ≫ Catalyst C9500-12q-a Version-
   Cisco ≫ Catalyst C9500-12q-e Version-
   Cisco ≫ Catalyst C9500-16x Version-
   Cisco ≫ Catalyst C9500-16x-a Version-
   Cisco ≫ Catalyst C9500-16x-e Version-
   Cisco ≫ Catalyst C9500-24q Version-
   Cisco ≫ Catalyst C9500-24q-a Version-
   Cisco ≫ Catalyst C9500-24q-e Version-
   Cisco ≫ Catalyst C9500-24y4c Version-
   Cisco ≫ Catalyst C9500-32c Version-
   Cisco ≫ Catalyst C9500-32qc Version-
   Cisco ≫ Catalyst C9500-40x Version-
   Cisco ≫ Catalyst C9500-40x-a Version-
   Cisco ≫ Catalyst C9500-40x-e Version-
   Cisco ≫ Catalyst C9500-48y4c Version-
   Cisco ≫ Catalyst C9600-lc-24c Version-
   Cisco ≫ Catalyst C9600-lc-48s Version-
   Cisco ≫ Catalyst C9600-lc-48tx Version-
   Cisco ≫ Catalyst C9600-lc-48yl Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.306
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
psirt@cisco.com 4.6 0.9 3.6
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory

The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.