cisco-sa-iosxe-info-disc-nrORXjO: Cisco IOS XE ROM Monitor Software for Catalyst Switches Information Disclosure Vulnerability
A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password. This vulnerability is due to a problem with the file and boot variable permissions in ROMMON. An attacker could exploit this vulnerability by rebooting the switch into ROMMON and entering specific commands through the console. A successful exploit could allow the attacker to read any file or reset the enable password. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-info-disc-nrORXjO
Other sources
A vulnerability in the password-recovery disable feature of Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco Catalyst Switches could allow an unauthenticated, local attacker to recover the configuration or reset the enable password.This vulnerability is due to a problem with the
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of Cisco SA IOS XE Info Disclosure vulnerability (cisco-sa-iosxe-info-disc-nrORXjO)?
The severity of the Cisco SA IOS XE Info Disclosure vulnerability is classified as high.
How do I fix the Cisco SA IOS XE Info Disclosure vulnerability (cisco-sa-iosxe-info-disc-nrORXjO)?
To fix the Cisco SA IOS XE Info Disclosure vulnerability, upgrade to a fixed version of the affected software as specified in Cisco's advisory.
What devices are affected by the Cisco SA IOS XE Info Disclosure vulnerability (cisco-sa-iosxe-info-disc-nrORXjO)?
The affected devices include Cisco Catalyst 9600, 9500, 9400, 9300, 9200, 3800, and 3600 Series Switches.
What type of attack can be executed due to the Cisco SA IOS XE Info Disclosure vulnerability (cisco-sa-iosxe-info-disc-nrORXjO)?
An unauthenticated, local attacker can exploit this vulnerability to recover the configuration or reset the enable password.
Is the Cisco SA IOS XE Info Disclosure vulnerability (cisco-sa-iosxe-info-disc-nrORXjO) remotely exploitable?
No, the Cisco SA IOS XE Info Disclosure vulnerability requires local access to the device for exploitation.