PT-2022-6312 · Cisco · Cisco Ios Xe Rom Monitor (Rommon)+1

Published 2022-09-28 · Updated 2022-10-13 · CVE-2022-20864

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches (affected versions not specified)

Description A problem with file and boot variable permissions in ROMMON could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This issue can be exploited by rebooting the switch into ROMMON and entering specific commands through the console, potentially allowing the attacker to read any file or reset the enable password.

Recommendations For Cisco IOS XE ROM Monitor (ROMMON) Software, update to a version that includes the fix for this issue, as software updates have been released by Cisco to address this problem. At the moment, there is no information about specific workarounds that address this vulnerability.

Fix

Weakness Enumeration

CWE-538

Related Identifiers

BDU:2023-00824

CVE-2022-20864

Affected Products

Cisco Ios Xe Rom Monitor (Rommon)

Cisco Ios Xe

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-20864 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-info-disc-nrORXjO · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00824 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-info-disc-nrORXjO · Vendor Advisory
• https://vuldb.com/?id.210384 · Note