Medium severity · published Oct 10, 2022
CVE-2022-20864
Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability
4.6
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem with the file and boot variable permissions in ROMMON. An attacker could exploit this vulnerability by rebooting the switch into ROMMON and entering specific commands through the console. A successful exploit could allow the attacker to read any file or reset the enable password.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cisco IOS XE Software · Cisco
All versions, or not specified · source: vendor
IX
Ios XE Rom Monitor · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-20864
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-20864
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-info-disc-nrORXjO
More from Cisco IOS XE Software
10.0
CVE-2023-20198
Cisco IOS XE Web UI Privilege Escalation Vulnerability
8.8
CVE-2017-6742
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
8.8
CVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
7.7
CVE-2025-20352
Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
7.2
CVE-2023-20273
Cisco IOS XE Web UI Command Injection Vulnerability