Vulnerabilities > CVE-2022-20864 - Unspecified vulnerability in Cisco IOS XE ROM Monitor

CVSS 4.6 - MEDIUM

Attack vector

PHYSICAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

low complexity

cisco

NVD

Published: 2022-10-10

Updated: 2023-11-07

Summary

A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem with the file and boot variable permissions in ROMMON. An attacker could exploit this vulnerability by rebooting the switch into ROMMON and entering specific commands through the console. A successful exploit could allow the attacker to read any file or reset the enable password.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE ROM Monitor -	1
Hardware	Cisco Cisco Catalyst 3650 - Cisco Catalyst 3650 12X48Fd E - Cisco Catalyst 3650 12X48Fd L - Cisco Catalyst 3650 12X48Fd S - Cisco Catalyst 3650 12X48Uq - Cisco Catalyst 3650 12X48Uq E - Cisco Catalyst 3650 12X48Uq L - Cisco Catalyst 3650 12X48Uq S - Cisco Catalyst 3650 12X48Ur - Cisco Catalyst 3650 12X48Ur E - Cisco Catalyst 3650 12X48Ur L - Cisco Catalyst 3650 12X48Ur S - Cisco Catalyst 3650 12X48Uz - Cisco Catalyst 3650 12X48Uz E - Cisco Catalyst 3650 12X48Uz L - Cisco Catalyst 3650 12X48Uz S - Cisco Catalyst 3650 24Pd - Cisco Catalyst 3650 24Pd E - Cisco Catalyst 3650 24Pd L - Cisco Catalyst 3650 24Pd S - Cisco Catalyst 3650 24Pdm - Cisco Catalyst 3650 24Pdm E - Cisco Catalyst 3650 24Pdm L - Cisco Catalyst 3650 24Pdm S - Cisco Catalyst 3650 24Ps E - Cisco Catalyst 3650 24Ps L - Cisco Catalyst 3650 24Ps S - Cisco Catalyst 3650 24Td E - Cisco Catalyst 3650 24Td L - Cisco Catalyst 3650 24Td S - Cisco Catalyst 3650 24Ts E - Cisco Catalyst 3650 24Ts L - Cisco Catalyst 3650 24Ts S - Cisco Catalyst 3650 48Fd E - Cisco Catalyst 3650 48Fd L - Cisco Catalyst 3650 48Fd S - Cisco Catalyst 3650 48Fq - Cisco Catalyst 3650 48Fq E - Cisco Catalyst 3650 48Fq L - Cisco Catalyst 3650 48Fq S - Cisco Catalyst 3650 48Fqm - Cisco Catalyst 3650 48Fqm E - Cisco Catalyst 3650 48Fqm L - Cisco Catalyst 3650 48Fqm S - Cisco Catalyst 3650 48Fs E - Cisco Catalyst 3650 48Fs L - Cisco Catalyst 3650 48Fs S - Cisco Catalyst 3650 48Pd E - Cisco Catalyst 3650 48Pd L - Cisco Catalyst 3650 48Pd S - Cisco Catalyst 3650 48Pq E - Cisco Catalyst 3650 48Pq L - Cisco Catalyst 3650 48Pq S - Cisco Catalyst 3650 48Ps E - Cisco Catalyst 3650 48Ps L - Cisco Catalyst 3650 48Ps S - Cisco Catalyst 3650 48Td E - Cisco Catalyst 3650 48Td L - Cisco Catalyst 3650 48Td S - Cisco Catalyst 3650 48Tq E - Cisco Catalyst 3650 48Tq L - Cisco Catalyst 3650 48Tq S - Cisco Catalyst 3650 48Ts E - Cisco Catalyst 3650 48Ts L - Cisco Catalyst 3650 48Ts S - Cisco Catalyst 3650 8X24Pd E - Cisco Catalyst 3650 8X24Pd L - Cisco Catalyst 3650 8X24Pd S - Cisco Catalyst 3650 8X24Uq - Cisco Catalyst 3650 8X24Uq E - Cisco Catalyst 3650 8X24Uq L - Cisco Catalyst 3650 8X24Uq S - Cisco Catalyst 3850 - Cisco Catalyst 3850 12S E - Cisco Catalyst 3850 12S S - Cisco Catalyst 3850 12X48U - Cisco Catalyst 3850 12Xs E - Cisco Catalyst 3850 12Xs S - Cisco Catalyst 3850 16Xs E - Cisco Catalyst 3850 16Xs S - Cisco Catalyst 3850 24P E - Cisco Catalyst 3850 24P L - Cisco Catalyst 3850 24P S - Cisco Catalyst 3850 24Pw S - Cisco Catalyst 3850 24S E - Cisco Catalyst 3850 24S S - Cisco Catalyst 3850 24T E - Cisco Catalyst 3850 24T L - Cisco Catalyst 3850 24T S - Cisco Catalyst 3850 24U - Cisco Catalyst 3850 24U E - Cisco Catalyst 3850 24U L - Cisco Catalyst 3850 24U S - Cisco Catalyst 3850 24Xs - Cisco Catalyst 3850 24Xs E - Cisco Catalyst 3850 24Xs S - Cisco Catalyst 3850 24Xu - Cisco Catalyst 3850 24Xu E - Cisco Catalyst 3850 24Xu L - Cisco Catalyst 3850 24Xu S - Cisco Catalyst 3850 32Xs E - Cisco Catalyst 3850 32Xs S - Cisco Catalyst 3850 48F E - Cisco Catalyst 3850 48F L - Cisco Catalyst 3850 48F S - Cisco Catalyst 3850 48P E - Cisco Catalyst 3850 48P L - Cisco Catalyst 3850 48P S - Cisco Catalyst 3850 48Pw S - Cisco Catalyst 3850 48T E - Cisco Catalyst 3850 48T L - Cisco Catalyst 3850 48T S - Cisco Catalyst 3850 48U - Cisco Catalyst 3850 48U E - Cisco Catalyst 3850 48U L - Cisco Catalyst 3850 48U S - Cisco Catalyst 3850 48Xs - Cisco Catalyst 3850 48Xs E - Cisco Catalyst 3850 48Xs F E - Cisco Catalyst 3850 48Xs F S - Cisco Catalyst 3850 48Xs S - Cisco Catalyst 3850 NM 2 40G - Cisco Catalyst 3850 NM 8 10G - Cisco Catalyst 9200 - Cisco Catalyst 9200Cx - Cisco Catalyst 9200L - Cisco Catalyst 9300 - Cisco Catalyst 9300 24P A - Cisco Catalyst 9300 24P E - Cisco Catalyst 9300 24S A - Cisco Catalyst 9300 24S E - Cisco Catalyst 9300 24T A - Cisco Catalyst 9300 24T E - Cisco Catalyst 9300 24U A - Cisco Catalyst 9300 24U E - Cisco Catalyst 9300 24Ux A - Cisco Catalyst 9300 24Ux E - Cisco Catalyst 9300 48P A - Cisco Catalyst 9300 48P E - Cisco Catalyst 9300 48S A - Cisco Catalyst 9300 48S E - Cisco Catalyst 9300 48T A - Cisco Catalyst 9300 48T E - Cisco Catalyst 9300 48U A - Cisco Catalyst 9300 48U E - Cisco Catalyst 9300 48Un A - Cisco Catalyst 9300 48Un E - Cisco Catalyst 9300 48Uxm A - Cisco Catalyst 9300 48Uxm E - Cisco Catalyst 9300L - Cisco Catalyst 9300L 24P 4G A - Cisco Catalyst 9300L 24P 4G E - Cisco Catalyst 9300L 24P 4X A - Cisco Catalyst 9300L 24P 4X E - Cisco Catalyst 9300L 24T 4G A - Cisco Catalyst 9300L 24T 4G E - Cisco Catalyst 9300L 24T 4X A - Cisco Catalyst 9300L 24T 4X E - Cisco Catalyst 9300L 48P 4G A - Cisco Catalyst 9300L 48P 4G E - Cisco Catalyst 9300L 48P 4X A - Cisco Catalyst 9300L 48P 4X E - Cisco Catalyst 9300L 48T 4G A - Cisco Catalyst 9300L 48T 4G E - Cisco Catalyst 9300L 48T 4X A - Cisco Catalyst 9300L 48T 4X E - Cisco Catalyst 9300L Stack - Cisco Catalyst 9300Lm - Cisco Catalyst 9300X - Cisco Catalyst 9400 - Cisco Catalyst 9407R - Cisco Catalyst 9410R - Cisco Catalyst 9500 - Cisco Catalyst 9500H - Cisco Catalyst 9600 - Cisco Catalyst 9600X - Cisco Catalyst C2928 24Lt C - Cisco Catalyst C2928 48Tc C - Cisco Catalyst C3850 12X48U E - Cisco Catalyst C3850 12X48U L - Cisco Catalyst C3850 12X48U S - Cisco Catalyst C9200 24P - Cisco Catalyst C9200 24T - Cisco Catalyst C9200 48P - Cisco Catalyst C9200 48T - Cisco Catalyst C9200L 24P 4G - Cisco Catalyst C9200L 24P 4X - Cisco Catalyst C9200L 24Pxg 2Y - Cisco Catalyst C9200L 24Pxg 4X - Cisco Catalyst C9200L 24T 4G - Cisco Catalyst C9200L 24T 4X - Cisco Catalyst C9200L 48P 4G - Cisco Catalyst C9200L 48P 4X - Cisco Catalyst C9200L 48Pxg 2Y - Cisco Catalyst C9200L 48Pxg 4X - Cisco Catalyst C9200L 48T 4G - Cisco Catalyst C9200L 48T 4X - Cisco Catalyst C9300 24P - Cisco Catalyst C9300 24S - Cisco Catalyst C9300 24T - Cisco Catalyst C9300 24U - Cisco Catalyst C9300 24Ux - Cisco Catalyst C9300 48P - Cisco Catalyst C9300 48S - Cisco Catalyst C9300 48T - Cisco Catalyst C9300 48U - Cisco Catalyst C9300 48Un - Cisco Catalyst C9300 48Uxm - Cisco Catalyst C9300L 24P 4G - Cisco Catalyst C9300L 24P 4X - Cisco Catalyst C9300L 24T 4G - Cisco Catalyst C9300L 24T 4X - Cisco Catalyst C9300L 48P 4G - Cisco Catalyst C9300L 48P 4X - Cisco Catalyst C9300L 48T 4G - Cisco Catalyst C9300L 48T 4X - Cisco Catalyst C9404R - Cisco Catalyst C9407R - Cisco Catalyst C9410R - Cisco Catalyst C9500 12Q - Cisco Catalyst C9500 12Q A - Cisco Catalyst C9500 12Q E - Cisco Catalyst C9500 16X - Cisco Catalyst C9500 16X A - Cisco Catalyst C9500 16X E - Cisco Catalyst C9500 24Q - Cisco Catalyst C9500 24Q A - Cisco Catalyst C9500 24Q E - Cisco Catalyst C9500 24Y4C - Cisco Catalyst C9500 32C - Cisco Catalyst C9500 32Qc - Cisco Catalyst C9500 40X - Cisco Catalyst C9500 40X A - Cisco Catalyst C9500 40X E - Cisco Catalyst C9500 48Y4C - Cisco Catalyst C9600 LC 24C - Cisco Catalyst C9600 LC 48S - Cisco Catalyst C9600 LC 48Tx - Cisco Catalyst C9600 LC 48Yl -	239

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-info-disc-nrORXjO