CVE-2022-20864
Summary
| CVE | CVE-2022-20864 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-10-10 21:15:00 UTC |
| Updated | 2023-11-07 03:43:00 UTC |
| Description | A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem with the file and boot variable permissions in ROMMON. An attacker could exploit this vulnerability by rebooting the switch into ROMMON and entering specific commands through the console. A successful exploit could allow the attacker to read any file or reset the enable password. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | Catalyst 3650 | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48fd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48fd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48fd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uq | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48ur | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48ur-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48ur-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48ur-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uz | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uz-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uz-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-12x48uz-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pd | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pdm | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pdm-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pdm-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24pdm-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ps-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ps-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ps-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24td-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24td-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24td-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ts-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ts-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-24ts-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fq | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fqm | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fqm-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fqm-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fqm-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fs-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48fs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48pq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ps-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ps-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ps-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48td-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48td-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48td-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48tq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48tq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48tq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ts-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ts-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-48ts-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24pd-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24pd-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24pd-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24uq | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24uq-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24uq-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3650-8x24uq-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850 | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12s-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12s-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12x48u | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-12xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-16xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-16xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24p-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24p-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24p-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24pw-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24s-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24s-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24t-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24t-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24t-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24u | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24u-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24u-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24u-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xs | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xu | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xu-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xu-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-24xu-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-32xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-32xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48f-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48f-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48f-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48p-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48p-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48p-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48pw-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48t-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48t-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48t-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48u | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48u-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48u-l | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48u-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs-f-e | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs-f-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-48xs-s | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-nm-2-40g | - | All | All | All |
| Hardware | Cisco | Catalyst 3850-nm-8-10g | - | All | All | All |
| Hardware | Cisco | Catalyst 9200 | - | All | All | All |
| Hardware | Cisco | Catalyst 9200cx | - | All | All | All |
| Hardware | Cisco | Catalyst 9200l | - | All | All | All |
| Hardware | Cisco | Catalyst 9300 | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24p-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24p-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24s-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24s-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24t-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24t-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24u-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24u-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24ux-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-24ux-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48p-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48p-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48s-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48s-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48t-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48t-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48u-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48u-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48un-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48un-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48uxm-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300-48uxm-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24p-4g-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24p-4g-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24p-4x-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24p-4x-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24t-4g-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24t-4g-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24t-4x-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-24t-4x-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48p-4g-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48p-4g-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48p-4x-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48p-4x-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48t-4g-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48t-4g-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48t-4x-a | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l-48t-4x-e | - | All | All | All |
| Hardware | Cisco | Catalyst 9300lm | - | All | All | All |
| Hardware | Cisco | Catalyst 9300l Stack | - | All | All | All |
| Hardware | Cisco | Catalyst 9300x | - | All | All | All |
| Hardware | Cisco | Catalyst 9400 | - | All | All | All |
| Hardware | Cisco | Catalyst 9407r | - | All | All | All |
| Hardware | Cisco | Catalyst 9410r | - | All | All | All |
| Hardware | Cisco | Catalyst 9500 | - | All | All | All |
| Hardware | Cisco | Catalyst 9500h | - | All | All | All |
| Hardware | Cisco | Catalyst 9600 | - | All | All | All |
| Hardware | Cisco | Catalyst 9600x | - | All | All | All |
| Hardware | Cisco | Catalyst C2928-24lt-c | - | All | All | All |
| Hardware | Cisco | Catalyst C2928-48tc-c | - | All | All | All |
| Hardware | Cisco | Catalyst C3850-12x48u-e | - | All | All | All |
| Hardware | Cisco | Catalyst C3850-12x48u-l | - | All | All | All |
| Hardware | Cisco | Catalyst C3850-12x48u-s | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24ux | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48un | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48uxm | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9404r | - | All | All | All |
| Hardware | Cisco | Catalyst C9407r | - | All | All | All |
| Hardware | Cisco | Catalyst C9410r | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-12q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-12q-a | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-12q-e | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-16x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-16x-a | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-16x-e | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24q-a | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24q-e | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24y4c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32qc | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-40x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-40x-a | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-40x-e | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-48y4c | - | All | All | All |
| Hardware | Cisco | Catalyst C9600-lc-24c | - | All | All | All |
| Hardware | Cisco | Catalyst C9600-lc-48s | - | All | All | All |
| Hardware | Cisco | Catalyst C9600-lc-48tx | - | All | All | All |
| Hardware | Cisco | Catalyst C9600-lc-48yl | - | All | All | All |
| Operating System | Cisco | Ios Xe Rom Monitor | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 20220928 Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability | CISCO | tools.cisco.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 317243 Cisco Internetwork Operating System (IOS) XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability (cisco-sa-iosxe-info-disc-nrORXjO)