CVE-2022-20649

A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container. This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user. The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

• CWE-489

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rcm-vuls-7cS3Nuq
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tetr-cmd-injc-skrwGO
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-FmbPu2pe

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-20643Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20644Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20645Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20646Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20647Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2022-20648A vulnerability in a debug function for Cisco RCM for C…5.3
• CVE-2022-2065Cross-site Scripting (XSS) - Stored in GitHub repository neo…5.4
• CVE-2022-20650A vulnerability in the NX-API feature of Cisco NX-OS Softwar…8.8
• CVE-2022-20651A vulnerability in the logging component of Cisco Adaptive S…5.5
• CVE-2022-20652A vulnerability in the web-based management interface and in…6.5
• CVE-2022-20653A vulnerability in the DNS-based Authentication of Named Ent…7.5
• CVE-2022-20654A vulnerability in the web-based interface of Cisco Web…6.1