Physical Access Vulnerability: Retrieval and Decryption of Encrypted CLI User Passwords

CVE-2022-46142 · MEDIUM Severity

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

Affected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.

Learn more about our Physical Security Assessment.