CVE-2022-20648
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Nov 15, 2024
CWE ID 200
Summary
CVE-2022-20648 is a vulnerability affecting the debug function in Cisco RCM for Cisco StarOS Software. An unauthenticated, remote attacker can exploit this issue by connecting to the debug port and executing debug commands, potentially gaining access to restricted confidential information. The vulnerability arises due to a debug service that incorrectly listens to and accepts incoming connections. No workarounds are available, and Cisco has issued software updates to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.