{"uuid": "79765147-21e1-41c1-8f5d-dd8e1f15ec2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/hacking_Attack/39552", "content": "Black Hat Ethical Hacking\nCisco bug gives remote attackers root privileges via debug mode\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Cisco bug gives remote attackers root privileges via debug modePost Views: 119 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nCisco has fixed a critical security flaw discovered in the Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software\u00a0during internal security testing.\nThe vulnerability, tracked as CVE-2022-20649, enables unauthenticated attackers to gain\u00a0remote code execution (RCE) with root-level privileges on devices running the vulnerable\u00a0software.\n\n\u201cA vulnerability in Cisco RCM for Cisco StarOS Software\u00a0could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container,\u201d Cisco said.\n\nAs the company further explains,\u00a0the vulnerability exists due to the debug mode being incorrectly enabled for specific services.\n\n\u201cAn attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled.\u00a0A successful exploit could allow the attacker to execute arbitrary commands as the root user,\u201d\u00a0Cisco added.\n\nHowever, for unauthenticated access to devices running unpatched software, the attackers would first need to perform detailed reconnaissance to discover the\u00a0vulnerable services.\nSee Also: Complete Offensive Security and Ethical Hacking Course No in-the-wild exploitationCisco\u2019s Product Security Incident Response Team (PSIRT) said that the company is not aware of exploitation of this vulnerability\u00a0in ongoing attacks.\n\nToday, Cisco also fixed a medium severity information disclosure bug\u00a0(CVE-2022-20648)\u00a0in the\u00a0Cisco RCM for Cisco StarOS caused by a\u00a0debug service incorrectly listening to and accepting incoming connections.\n\nRemote attackers could exploit this\u00a0second bug\u00a0by executing debug commands after\u00a0connecting to the debug port. Successful exploitation could allow them to access sensitive debugging information on the vulnerable device.\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable\nThe company has released Cisco RCM for StarOS 21.25.4, which comes with security updates to address these flaws and is\u00a0available through the Software Center on Cisco.com.\n\nLast year, Cisco patched several other vulnerabilities that allow threat actors to execute code and commands remotely with root privileges.\n\nFor instance, it\u00a0addressed critical pre-authentication RCE flaw impacting SD-WAN vManage that could enable threat actors to get root privileges\u00a0on the underlying OS in May. Another pre-auth bug in the same software, allowing attackers to gain RCE as root, was fixed in April.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: OSINT Tool: Commit Stream See Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks1 day ago\n* https://www.blackhatethicalhacking.com/[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T13:00:05.581871Z"}