← Database

CVE-2022-20864

MEDIUM CVSS: 4.6 Published: 2022-10-10 Modified: 2026-06-17

Description

A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem with the file and boot variable permissions in ROMMON. An attacker could exploit this vulnerability by rebooting the switch into ROMMON and entering specific commands through the console. A successful exploit could allow the attacker to read any file or reset the enable password.

Affected Platforms

Cisco Catalyst 3850-24U-ECisco Catalyst 3650-48Tq-SCisco Catalyst C9200L-48Pxg-2YCisco Catalyst C9500-16X-ECisco Catalyst C9600-Lc-48YlCisco Catalyst 3850-48F-ECisco Catalyst C9300L-48T-4GCisco Catalyst C9600-Lc-48TxCisco Catalyst 3850-24U-SCisco Catalyst C9500-24Q-E

Weakness Type

CWE-538, NVD-CWE-Other

References