CVE-2022-20649
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Nov 15, 2024
CWE ID 489
Summary
CVE-2022-20649 is a remote code execution vulnerability affecting Cisco RCM for Cisco StarOS Software. An unauthenticated attacker can exploit this issue by connecting to the device and navigating to a service with debug mode incorrectly enabled. This could allow them to execute arbitrary commands with root-level privileges. Reconnaissance is required for unauthenticated access, and authenticated attackers can also exploit the vulnerability. No workarounds are available, and Cisco has released software updates to address the issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.