VULNERABILITY INTELLIGENCE

CVE-2022-46142

CVSS score5.2 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2022-12-13
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

Weakness classification

  • CWE-257: Storing Passwords in a Recoverable Format
  • CWE-522: Insufficiently Protected Credentials

Primary references