CVE-2022-20648

A vulnerability in a debug function for Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform debug actions that could result in the disclosure of confidential information that should be restricted. This vulnerability exists because of a debug service that incorrectly listens to and accepts incoming connections. An attacker could exploit this vulnerability by connecting to the debug port and executing debug commands. A successful exploit could allow the attacker to view sensitive debugging information.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-200

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rcm-vuls-7cS3Nuq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tetr-cmd-injc-skrwGO
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-FmbPu2pe

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20642Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20643Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20644Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20645Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20646Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20647Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20649A vulnerability in Cisco RCM for Cisco StarOS Soft…8.1
• CVE-2022-2065Cross-site Scripting (XSS) - Stored in GitHub repository neo…5.4
• CVE-2022-20650A vulnerability in the NX-API feature of Cisco NX-OS Softwar…8.8
• CVE-2022-20651A vulnerability in the logging component of Cisco Adaptive S…5.5
• CVE-2022-20652A vulnerability in the web-based management interface and in…6.5
• CVE-2022-20653A vulnerability in the DNS-based Authentication of Named Ent…7.5