CVE-2022-20944

CVE	CVE-2022-20944
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-10-10 21:15:00 UTC
Updated	2023-11-07 03:43:00 UTC
Description	A vulnerability in the software image verification functionality of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, physical attacker to execute unsigned code at system boot time. This vulnerability is due to an improper check in the code function that manages the verification of the digital signatures of system image files during the initial boot process. An attacker could exploit this vulnerability by loading unsigned software on an affected device. A successful exploit could allow the attacker to boot a malicious software image or execute unsigned code and bypass the image verification check part of the boot process of the affected device. To exploit this vulnerability, the attacker needs either unauthenticated physical access to the device or privileged access to the root shell on the device. Note: In Cisco IOS XE Software releases 16.11.1 and later, root shell access is protected by the Consent Token mechanism. However, an attacker with level-15 privileges could easily downgrade the Cisco IOS XE Software running on a device to a release where root shell access is more readily available.

Problem Types: CWE-347

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	Catalyst 9200	-	All	All	All
Hardware	Cisco	Catalyst 9200cx	-	All	All	All
Hardware	Cisco	Catalyst 9200l	-	All	All	All
Hardware	Cisco	Catalyst C9200-24p	-	All	All	All
Hardware	Cisco	Catalyst C9200-24t	-	All	All	All
Hardware	Cisco	Catalyst C9200-48p	-	All	All	All
Hardware	Cisco	Catalyst C9200-48t	-	All	All	All
Hardware	Cisco	Catalyst C9200l-24p-4g	-	All	All	All
Hardware	Cisco	Catalyst C9200l-24p-4x	-	All	All	All
Hardware	Cisco	Catalyst C9200l-24pxg-2y	-	All	All	All
Hardware	Cisco	Catalyst C9200l-24pxg-4x	-	All	All	All
Hardware	Cisco	Catalyst C9200l-24t-4g	-	All	All	All
Hardware	Cisco	Catalyst C9200l-24t-4x	-	All	All	All
Hardware	Cisco	Catalyst C9200l-48p-4g	-	All	All	All
Hardware	Cisco	Catalyst C9200l-48p-4x	-	All	All	All
Hardware	Cisco	Catalyst C9200l-48pxg-2y	-	All	All	All
Hardware	Cisco	Catalyst C9200l-48pxg-4x	-	All	All	All
Hardware	Cisco	Catalyst C9200l-48t-4g	-	All	All	All
Hardware	Cisco	Catalyst C9200l-48t-4x	-	All	All	All
Operating System	Cisco	Ios Xe	-	All	All	All

Reference	Source	Link	Tags
20220928 Cisco IOS XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability	CISCO	tools.cisco.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

317236 Cisco Internetwork Operating System (IOS) XE Software for Catalyst 9200 Series Switches Arbitrary Code Execution Vulnerability (cisco-sa-ios-xe-cat-verify-D4NEQA6q)