CVE-2022-20864 : A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Mon

Products affected by CVE-2022-20864

Cisco » Ios Xe Rom Monitor » Version: N/A
cpe:2.3:o:cisco:ios_xe_rom_monitor:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Catalyst 3650 » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48ur-s » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-e » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-l » Version: N/A
When used together with: Cisco » Catalyst 3650-12x48uz-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24pdm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-24ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fqm-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48fs-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48pq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ps-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48td-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48tq-s » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-e » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-l » Version: N/A
When used together with: Cisco » Catalyst 3650-48ts-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24pd-s » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-e » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-l » Version: N/A
When used together with: Cisco » Catalyst 3650-8x24uq-s » Version: N/A
When used together with: Cisco » Catalyst 3850 » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-12x48u » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-12xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-16xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24pw-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24s-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24u » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-e » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-l » Version: N/A
When used together with: Cisco » Catalyst 3850-24xu-s » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-32xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48f-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48p-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48pw-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48t-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48u » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-l » Version: N/A
When used together with: Cisco » Catalyst 3850-48u-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-f-e » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-f-s » Version: N/A
When used together with: Cisco » Catalyst 3850-48xs-s » Version: N/A
When used together with: Cisco » Catalyst 3850-nm-2-40g » Version: N/A
When used together with: Cisco » Catalyst 3850-nm-8-10g » Version: N/A
When used together with: Cisco » Catalyst 9200 » Version: N/A
When used together with: Cisco » Catalyst 9200cx » Version: N/A
When used together with: Cisco » Catalyst 9200l » Version: N/A
When used together with: Cisco » Catalyst 9300 » Version: N/A
When used together with: Cisco » Catalyst 9300-24p-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24p-e » Version: N/A
When used together with: Cisco » Catalyst 9300-24s-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24s-e » Version: N/A
When used together with: Cisco » Catalyst 9300-24t-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24t-e » Version: N/A
When used together with: Cisco » Catalyst 9300-24u-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24u-e » Version: N/A
When used together with: Cisco » Catalyst 9300-24ux-a » Version: N/A
When used together with: Cisco » Catalyst 9300-24ux-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48p-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48p-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48s-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48s-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48t-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48t-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48u-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48u-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48un-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48un-e » Version: N/A
When used together with: Cisco » Catalyst 9300-48uxm-a » Version: N/A
When used together with: Cisco » Catalyst 9300-48uxm-e » Version: N/A
When used together with: Cisco » Catalyst 9300l » Version: N/A
When used together with: Cisco » Catalyst 9300l-24p-4g-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-24p-4g-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-24p-4x-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-24p-4x-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-24t-4g-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-24t-4g-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-24t-4x-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-24t-4x-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-48p-4g-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-48p-4g-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-48p-4x-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-48p-4x-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-48t-4g-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-48t-4g-e » Version: N/A
When used together with: Cisco » Catalyst 9300l-48t-4x-a » Version: N/A
When used together with: Cisco » Catalyst 9300l-48t-4x-e » Version: N/A
When used together with: Cisco » Catalyst 9300l Stack » Version: N/A
When used together with: Cisco » Catalyst 9300lm » Version: N/A
When used together with: Cisco » Catalyst 9300x » Version: N/A
When used together with: Cisco » Catalyst 9400 » Version: N/A
When used together with: Cisco » Catalyst 9407r » Version: N/A
When used together with: Cisco » Catalyst 9410r » Version: N/A
When used together with: Cisco » Catalyst 9500 » Version: N/A
When used together with: Cisco » Catalyst 9500h » Version: N/A
When used together with: Cisco » Catalyst 9600 » Version: N/A
When used together with: Cisco » Catalyst 9600x » Version: N/A
When used together with: Cisco » Catalyst C2928-24lt-c » Version: N/A
When used together with: Cisco » Catalyst C2928-48tc-c » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-e » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-l » Version: N/A
When used together with: Cisco » Catalyst C3850-12x48u-s » Version: N/A
When used together with: Cisco » Catalyst C9200-24p » Version: N/A
When used together with: Cisco » Catalyst C9200-24t » Version: N/A
When used together with: Cisco » Catalyst C9200-48p » Version: N/A
When used together with: Cisco » Catalyst C9200-48t » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-24pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-24t-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48p-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-2y » Version: N/A
When used together with: Cisco » Catalyst C9200l-48pxg-4x » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4g » Version: N/A
When used together with: Cisco » Catalyst C9200l-48t-4x » Version: N/A
When used together with: Cisco » Catalyst C9300-24p » Version: N/A
When used together with: Cisco » Catalyst C9300-24s » Version: N/A
When used together with: Cisco » Catalyst C9300-24t » Version: N/A

Max 200 conditions are displayed on this page, to prevent potential performance issues, please refer to NVD for more details.

Exploit prediction scoring system (EPSS) score for CVE-2022-20864

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 22 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-20864

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	0.9	3.6	Cisco Systems, Inc.
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None
4.6	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	0.9	3.6	NIST
Attack Vector: Physical Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

CWE ids for CVE-2022-20864

CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory

The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information.

Assigned by: ykramarz@cisco.com (Secondary)

References for CVE-2022-20864

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-info-disc-nrORXjO

Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability
Vendor Advisory

Vulnerability Details : CVE-2022-20864

Products affected by CVE-2022-20864

Exploit prediction scoring system (EPSS) score for CVE-2022-20864

CVSS scores for CVE-2022-20864

CWE ids for CVE-2022-20864

References for CVE-2022-20864