PT-2022-3760 · Cisco · Cisco Catalyst Micro Switches+2

Published 2022-04-13 · Updated 2022-04-25 · CVE-2022-20661

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Digital Building Series Switches (affected versions not specified) Cisco Catalyst Micro Switches (affected versions not specified)

Description The issue is related to multiple vulnerabilities affecting Cisco devices, which could allow an attacker to execute persistent code at boot time or permanently prevent the device from booting, resulting in a permanent denial of service (DoS) condition. The vulnerabilities are associated with shortcomings in the security mechanisms of the Cisco IOS operating system loader.

Recommendations For Cisco Catalyst Digital Building Series Switches, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Cisco Catalyst Micro Switches, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Initialization

Weakness Enumeration

CWE-489

CWE-1221

CWE-665

Related Identifiers

BDU:2022-04548

CVE-2022-20661

Affected Products

Cisco Catalyst Digital Building Series Switches

Cisco Catalyst Micro Switches

Cisco Ios

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cdb-cmicr-vulns-KJjFtNb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20661 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04548 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-20661 · Security Note
• https://t.me/cibsecurity/40868 · Telegram Post