What is CVE-2022-20944?

CVE-2022-20944 is a medium-severity vulnerability in Cisco Catalyst_9200, classified under Improper Verification of Cryptographic Signature. CVSS score: 6.1/10. Published 2022-10-10.

How severe is CVE-2022-20944?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Vulnerability in Cisco Catalyst_9200

CVE-2022-20944

A vulnerability in the software image verification functionality of Cisco IOS XE Software for Cisco Catalyst 9200 Series Switches could allow an unauthenticated, physical attacker to execute unsigned code at system boot time. This vulnerab…

EPSS: 0.002 (10.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N.

Affected products

Cisco Catalyst_9200
Cisco Catalyst_9200cx
Cisco Catalyst_9200l
Cisco Catalyst_c9200-24p
Cisco Catalyst_c9200-24t
Cisco Catalyst_c9200-48p
Cisco Catalyst_c9200-48t
Cisco Catalyst_c9200l-24p-4g
Cisco Catalyst_c9200l-24p-4x
Cisco Catalyst_c9200l-24pxg-2y

Weakness classification (CWE)

CWE-347 — Improper Verification of Cryptographic Signature

References

psirt@cisco.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2022-20944?: CVE-2022-20944 is a medium-severity vulnerability in Cisco Catalyst_9200, classified under Improper Verification of Cryptographic Signature. CVSS score: 6.1/10. Published 2022-10-10.
How severe is CVE-2022-20944?: Medium severity. CVSS v3 base score is 6.1 out of 10.