Vigie VulnDBEuropean-hosted Vulnerability DB
FR
Menu

Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities (Cisco Cisco IOS ROMMON Software)

CVE-2022-20661
MEDIUM 4.6

At a glance

Source
NVD
EPSS
EPSS 0.22 % · percentile 13 ()
State
PUBLISHED
Published
Updated
Assigner
cisco
NVD status
Modified

Search on…

Description

Multiple vulnerabilities that affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

Weaknesses (CWE)

  • CWE-1221 — Incorrect Register Defaults or Module Parameters
  • CWE-665 — Improper Initialization

References

Scores

VersionScoreVectorScored by
CVSS 3.1MEDIUM 4.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hcisco
CVSS 3.1MEDIUM 4.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · psirt@cisco.com (Secondary)
CVSS 3.1MEDIUM 4.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0MEDIUM 4.9AV:L/AC:L/Au:N/C:N/I:N/A:CNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Cisco · Cisco IOS ROMMON Softwareaffected n/a

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD