{"vulnerability": "cve-2022-20649", "sightings": [{"uuid": "8bb6b71a-f9c3-49cb-88ab-192c8b2e3d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/habr_com_news/2879", "content": "\u200bCisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 RCM \u0434\u043b\u044f StarOS\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco Systems \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0434\u044b\u0440\u044b \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Redundancy Configuration Manager (RCM), \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0433 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c CVE-2022-20649 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 9.0 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043e\u043d\u0430 \u0432 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u043c \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #Cisco", "creation_timestamp": "2022-01-21T16:15:03.000000Z"}, {"uuid": "453ec9b2-e1b3-4262-b70c-c48b01809b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/NeKaspersky/1707", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043e\u0444\u0442\u0435 Cisco \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 debug-\u0440\u0435\u0436\u0438\u043c.\n\n\u041f\u043e\u0441\u043b\u0435 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Cisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 RCM (Redundancy Configuration Manager, \u0441\u043e\u0444\u0442\u0432\u0430\u0440\u043d\u044b\u0439 \u043c\u043e\u0434\u0443\u043b\u044c, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0435 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435) \u0434\u043b\u044f StarOS, \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 BleepingComputer.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u043e\u043c\u0435\u0440 CVE-2022-20649, \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0442\u0438\u043f\u0443 RCE \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0434\u0435\u0432\u0430\u0439\u0441\u0430\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0441\u0443\u043f\u0435\u0440\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (root). \u041a\u0430\u043a \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430 \u0432 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u043c, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043d\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 debug-\u0440\u0435\u0436\u0438\u043c\u0443. \u0422\u0430\u0436\u0435 Cisco \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u043b\u043e\u0441\u044c \u0431\u044b \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0434\u0435\u0432\u0430\u0439\u0441\u043e\u0432 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u0435\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u0433\u0434\u0435 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b. \n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Cisco \u043f\u043e \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b (Product Security Incident Response Team, PSIRT) \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0438\u043c \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0435\u043c-\u043b\u0438\u0431\u043e.\n@NeKaspersky", "creation_timestamp": "2022-01-21T14:11:42.000000Z"}, {"uuid": "57d121e5-1e45-42d6-bb4e-c4ddc4b6b22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/true_secator/2544", "content": "Cisco \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Redundancy Configuration Manager (RCM) \u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f StarOS, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0435\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 ASR 5000.\n\nCVE-2022-20649 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,0 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430. \u041e\u0448\u0438\u0431\u043a\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0441\u043b\u0443\u0436\u0431\u0430 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0444\u0438\u043b\u044c\u0442\u0440\u0443\u0435\u0442 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f.\n\n\u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0436\u0431\u0430\u0445 \u0440\u0435\u0436\u0438\u043c \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 \u0438 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0442\u0430\u043a\u043e\u0439 \u0441\u043b\u0443\u0436\u0431\u0435, \u0447\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0435\u043c\u0443 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u0443\u044e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\u00a0\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 (CVE-2022-20648), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u041e\u0431\u0430 \u0434\u0435\u0444\u0435\u043a\u0442\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c RCM \u0432\u0435\u0440\u0441\u0438\u0438 21.25.4.\u00a0\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0432\u0441\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Cisco, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0441\u0435 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 RCM \u0434\u043e 21.25, \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Cisco \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00a0\u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u0435\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 Modbus \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f Snort \u0438 \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0434\u043b\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Cisco.\n\nCVE-2022-20685 (\u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5) \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DoS), \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a Modbus \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u041f\u041e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 FTD, Cybervision, Meraki MX, UTD \u0438 Snort. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 CVE-2022-20655 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0441\u0440\u0435\u0434\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u044b\u0447\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 root.\n\n\u0412 \u043e\u0431\u0449\u0435\u0439 \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438, Cisco \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0434\u0432\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f \u043f\u043e \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u0432 \u043e\u0434\u043d\u043e\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u00a0\u0434\u043b\u044f \u0441\u0440\u0435\u0434\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f ConfD \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435, \u0430 \u0432 \u0434\u0440\u0443\u0433\u043e\u043c \u2014\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u00a0, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u0412\u0430\u0436\u043d\u043e, \u0447\u0442\u043e \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u043e\u0439-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043e. \u0412\u043e \u0432\u0441\u044f\u043a\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u043e\u043a\u0430.", "creation_timestamp": "2022-01-21T14:22:39.000000Z"}, {"uuid": "9650e37e-2f22-4864-9c7e-5468fbceb212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/thehackernews/1812", "content": "Cisco has released a security patch for a critical vulnerability (CVE-2022-20649) affecting RCM for Cisco StarOS that could be weaponized by an unauthenticated remote attacker to execute arbitrary code & take over vulnerable machines.\n\nDetails: https://thehackernews.com/2022/01/cisco-issues-patch-for-critical-rce.html", "creation_timestamp": "2022-01-21T08:11:01.000000Z"}, {"uuid": "143c8413-4a23-43b8-8a59-1d556d20807b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/cissp/5212", "content": "Ukraine says recent coordinated cyberattacks on select government systems are part of a larger wave of malicious activity aimed at sabotaging the country's critical infrastructure.\nRead: https://thehackernews.com/2022/01/ukraine-recent-cyber-attacks-part-of.html\n\nRussian hackers are heavily leveraging malicious Traffic Direction System (TSD) to spread several malware families, including Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish.\nRead details: https://thehackernews.com/2022/01/russian-hackers-heavily-using-malicious.html\n\nMicrosoft has detected hackers exploiting a new zero-day vulnerability (CVE-2021-35247) in SolarWinds Serv-U software related to Log4j attacks.\nRead: https://thehackernews.com/2022/01/microsoft-hackers-exploiting-new.html\n\nServ-U version 15.3 has been released to patch the issue.\nCisco has released a security patch for a critical vulnerability (CVE-2022-20649) affecting RCM for Cisco StarOS that could be weaponized by an unauthenticated remote attacker to execute arbitrary code & take over vulnerable machines.\nDetails: https://thehackernews.com/2022/01/cisco-issues-patch-for-critical-rce.html", "creation_timestamp": "2026-09-01T17:00:33.130824Z"}, {"uuid": "be053d0e-9699-4750-a643-82e39c3c0905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/hacking_Attack/39552", "content": "Black Hat Ethical Hacking\nCisco bug gives remote attackers root privileges via debug mode\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Cisco bug gives remote attackers root privileges via debug modePost Views: 119 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nCisco has fixed a critical security flaw discovered in the Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software\u00a0during internal security testing.\nThe vulnerability, tracked as CVE-2022-20649, enables unauthenticated attackers to gain\u00a0remote code execution (RCE) with root-level privileges on devices running the vulnerable\u00a0software.\n\n\u201cA vulnerability in Cisco RCM for Cisco StarOS Software\u00a0could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container,\u201d Cisco said.\n\nAs the company further explains,\u00a0the vulnerability exists due to the debug mode being incorrectly enabled for specific services.\n\n\u201cAn attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled.\u00a0A successful exploit could allow the attacker to execute arbitrary commands as the root user,\u201d\u00a0Cisco added.\n\nHowever, for unauthenticated access to devices running unpatched software, the attackers would first need to perform detailed reconnaissance to discover the\u00a0vulnerable services.\nSee Also: Complete Offensive Security and Ethical Hacking Course No in-the-wild exploitationCisco\u2019s Product Security Incident Response Team (PSIRT) said that the company is not aware of exploitation of this vulnerability\u00a0in ongoing attacks.\n\nToday, Cisco also fixed a medium severity information disclosure bug\u00a0(CVE-2022-20648)\u00a0in the\u00a0Cisco RCM for Cisco StarOS caused by a\u00a0debug service incorrectly listening to and accepting incoming connections.\n\nRemote attackers could exploit this\u00a0second bug\u00a0by executing debug commands after\u00a0connecting to the debug port. Successful exploitation could allow them to access sensitive debugging information on the vulnerable device.\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable\nThe company has released Cisco RCM for StarOS 21.25.4, which comes with security updates to address these flaws and is\u00a0available through the Software Center on Cisco.com.\n\nLast year, Cisco patched several other vulnerabilities that allow threat actors to execute code and commands remotely with root privileges.\n\nFor instance, it\u00a0addressed critical pre-authentication RCE flaw impacting SD-WAN vManage that could enable threat actors to get root privileges\u00a0on the underlying OS in May. Another pre-auth bug in the same software, allowing attackers to gain RCE as root, was fixed in April.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: OSINT Tool: Commit Stream See Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks1 day ago\n* https://www.blackhatethicalhacking.com/[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:59.189988Z"}, {"uuid": "a1b71ee8-752f-4351-ac39-f7d9e28cbda6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/hacking_Attack/39552", "content": "Black Hat Ethical Hacking\nCisco bug gives remote attackers root privileges via debug mode\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Cisco bug gives remote attackers root privileges via debug modePost Views: 119 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nCisco has fixed a critical security flaw discovered in the Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software\u00a0during internal security testing.\nThe vulnerability, tracked as CVE-2022-20649, enables unauthenticated attackers to gain\u00a0remote code execution (RCE) with root-level privileges on devices running the vulnerable\u00a0software.\n\n\u201cA vulnerability in Cisco RCM for Cisco StarOS Software\u00a0could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container,\u201d Cisco said.\n\nAs the company further explains,\u00a0the vulnerability exists due to the debug mode being incorrectly enabled for specific services.\n\n\u201cAn attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled.\u00a0A successful exploit could allow the attacker to execute arbitrary commands as the root user,\u201d\u00a0Cisco added.\n\nHowever, for unauthenticated access to devices running unpatched software, the attackers would first need to perform detailed reconnaissance to discover the\u00a0vulnerable services.\nSee Also: Complete Offensive Security and Ethical Hacking Course No in-the-wild exploitationCisco\u2019s Product Security Incident Response Team (PSIRT) said that the company is not aware of exploitation of this vulnerability\u00a0in ongoing attacks.\n\nToday, Cisco also fixed a medium severity information disclosure bug\u00a0(CVE-2022-20648)\u00a0in the\u00a0Cisco RCM for Cisco StarOS caused by a\u00a0debug service incorrectly listening to and accepting incoming connections.\n\nRemote attackers could exploit this\u00a0second bug\u00a0by executing debug commands after\u00a0connecting to the debug port. Successful exploitation could allow them to access sensitive debugging information on the vulnerable device.\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable\nThe company has released Cisco RCM for StarOS 21.25.4, which comes with security updates to address these flaws and is\u00a0available through the Software Center on Cisco.com.\n\nLast year, Cisco patched several other vulnerabilities that allow threat actors to execute code and commands remotely with root privileges.\n\nFor instance, it\u00a0addressed critical pre-authentication RCE flaw impacting SD-WAN vManage that could enable threat actors to get root privileges\u00a0on the underlying OS in May. Another pre-auth bug in the same software, allowing attackers to gain RCE as root, was fixed in April.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: OSINT Tool: Commit Stream See Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks1 day ago\n* https://www.blackhatethicalhacking.com/[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:21.628194Z"}, {"uuid": "78571cf9-4fc3-41ef-b968-8b02335b2281", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/cissp/5212", "content": "Ukraine says recent coordinated cyberattacks on select government systems are part of a larger wave of malicious activity aimed at sabotaging the country's critical infrastructure.\nRead: https://thehackernews.com/2022/01/ukraine-recent-cyber-attacks-part-of.html\n\nRussian hackers are heavily leveraging malicious Traffic Direction System (TSD) to spread several malware families, including Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish.\nRead details: https://thehackernews.com/2022/01/russian-hackers-heavily-using-malicious.html\n\nMicrosoft has detected hackers exploiting a new zero-day vulnerability (CVE-2021-35247) in SolarWinds Serv-U software related to Log4j attacks.\nRead: https://thehackernews.com/2022/01/microsoft-hackers-exploiting-new.html\n\nServ-U version 15.3 has been released to patch the issue.\nCisco has released a security patch for a critical vulnerability (CVE-2022-20649) affecting RCM for Cisco StarOS that could be weaponized by an unauthenticated remote attacker to execute arbitrary code & take over vulnerable machines.\nDetails: https://thehackernews.com/2022/01/cisco-issues-patch-for-critical-rce.html", "creation_timestamp": "2026-09-02T01:04:16.430855Z"}, {"uuid": "79765147-21e1-41c1-8f5d-dd8e1f15ec2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/hacking_Attack/39552", "content": "Black Hat Ethical Hacking\nCisco bug gives remote attackers root privileges via debug mode\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Cisco bug gives remote attackers root privileges via debug modePost Views: 119 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nCisco has fixed a critical security flaw discovered in the Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software\u00a0during internal security testing.\nThe vulnerability, tracked as CVE-2022-20649, enables unauthenticated attackers to gain\u00a0remote code execution (RCE) with root-level privileges on devices running the vulnerable\u00a0software.\n\n\u201cA vulnerability in Cisco RCM for Cisco StarOS Software\u00a0could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container,\u201d Cisco said.\n\nAs the company further explains,\u00a0the vulnerability exists due to the debug mode being incorrectly enabled for specific services.\n\n\u201cAn attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled.\u00a0A successful exploit could allow the attacker to execute arbitrary commands as the root user,\u201d\u00a0Cisco added.\n\nHowever, for unauthenticated access to devices running unpatched software, the attackers would first need to perform detailed reconnaissance to discover the\u00a0vulnerable services.\nSee Also: Complete Offensive Security and Ethical Hacking Course No in-the-wild exploitationCisco\u2019s Product Security Incident Response Team (PSIRT) said that the company is not aware of exploitation of this vulnerability\u00a0in ongoing attacks.\n\nToday, Cisco also fixed a medium severity information disclosure bug\u00a0(CVE-2022-20648)\u00a0in the\u00a0Cisco RCM for Cisco StarOS caused by a\u00a0debug service incorrectly listening to and accepting incoming connections.\n\nRemote attackers could exploit this\u00a0second bug\u00a0by executing debug commands after\u00a0connecting to the debug port. Successful exploitation could allow them to access sensitive debugging information on the vulnerable device.\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable\nThe company has released Cisco RCM for StarOS 21.25.4, which comes with security updates to address these flaws and is\u00a0available through the Software Center on Cisco.com.\n\nLast year, Cisco patched several other vulnerabilities that allow threat actors to execute code and commands remotely with root privileges.\n\nFor instance, it\u00a0addressed critical pre-authentication RCE flaw impacting SD-WAN vManage that could enable threat actors to get root privileges\u00a0on the underlying OS in May. Another pre-auth bug in the same software, allowing attackers to gain RCE as root, was fixed in April.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: OSINT Tool: Commit Stream See Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks1 day ago\n* https://www.blackhatethicalhacking.com/[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T13:00:05.581871Z"}, {"uuid": "b74c6456-793c-4cf8-ba21-d4d9959a0f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/hacking_Attack/39552", "content": "Black Hat Ethical Hacking\nCisco bug gives remote attackers root privileges via debug mode\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/Untitled-design-2-1.png Cisco bug gives remote attackers root privileges via debug modePost Views: 119 https://www.blackhatethicalhacking.com/wp-content/uploads/2021/08/BECOME-A-PATRON-AND-UNLOCK-EXCLUSIVE-VIDEOS-1.png Reading Time: 1 Minute\nCisco has fixed a critical security flaw discovered in the Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software\u00a0during internal security testing.\nThe vulnerability, tracked as CVE-2022-20649, enables unauthenticated attackers to gain\u00a0remote code execution (RCE) with root-level privileges on devices running the vulnerable\u00a0software.\n\n\u201cA vulnerability in Cisco RCM for Cisco StarOS Software\u00a0could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container,\u201d Cisco said.\n\nAs the company further explains,\u00a0the vulnerability exists due to the debug mode being incorrectly enabled for specific services.\n\n\u201cAn attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled.\u00a0A successful exploit could allow the attacker to execute arbitrary commands as the root user,\u201d\u00a0Cisco added.\n\nHowever, for unauthenticated access to devices running unpatched software, the attackers would first need to perform detailed reconnaissance to discover the\u00a0vulnerable services.\nSee Also: Complete Offensive Security and Ethical Hacking Course No in-the-wild exploitationCisco\u2019s Product Security Incident Response Team (PSIRT) said that the company is not aware of exploitation of this vulnerability\u00a0in ongoing attacks.\n\nToday, Cisco also fixed a medium severity information disclosure bug\u00a0(CVE-2022-20648)\u00a0in the\u00a0Cisco RCM for Cisco StarOS caused by a\u00a0debug service incorrectly listening to and accepting incoming connections.\n\nRemote attackers could exploit this\u00a0second bug\u00a0by executing debug commands after\u00a0connecting to the debug port. Successful exploitation could allow them to access sensitive debugging information on the vulnerable device.\nSee Also: Microsoft: New critical Windows HTTP vulnerability is wormable\nThe company has released Cisco RCM for StarOS 21.25.4, which comes with security updates to address these flaws and is\u00a0available through the Software Center on Cisco.com.\n\nLast year, Cisco patched several other vulnerabilities that allow threat actors to execute code and commands remotely with root privileges.\n\nFor instance, it\u00a0addressed critical pre-authentication RCE flaw impacting SD-WAN vManage that could enable threat actors to get root privileges\u00a0on the underlying OS in May. Another pre-auth bug in the same software, allowing attackers to gain RCE as root, was fixed in April.\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSee Also: OSINT Tool: Commit Stream See Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/01/ezgif.com-gif-maker-11-1-90x90.jpg Beijing Olympics App Flaws Allow Man-in-the-Middle Attacks1 day ago\n* https://www.blackhatethicalhacking.com/[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:14.665008Z"}, {"uuid": "4af25416-0b7b-44b1-bc62-9b7b281a656b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/cissp/5212", "content": "Ukraine says recent coordinated cyberattacks on select government systems are part of a larger wave of malicious activity aimed at sabotaging the country's critical infrastructure.\nRead: https://thehackernews.com/2022/01/ukraine-recent-cyber-attacks-part-of.html\n\nRussian hackers are heavily leveraging malicious Traffic Direction System (TSD) to spread several malware families, including Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish.\nRead details: https://thehackernews.com/2022/01/russian-hackers-heavily-using-malicious.html\n\nMicrosoft has detected hackers exploiting a new zero-day vulnerability (CVE-2021-35247) in SolarWinds Serv-U software related to Log4j attacks.\nRead: https://thehackernews.com/2022/01/microsoft-hackers-exploiting-new.html\n\nServ-U version 15.3 has been released to patch the issue.\nCisco has released a security patch for a critical vulnerability (CVE-2022-20649) affecting RCM for Cisco StarOS that could be weaponized by an unauthenticated remote attacker to execute arbitrary code & take over vulnerable machines.\nDetails: https://thehackernews.com/2022/01/cisco-issues-patch-for-critical-rce.html", "creation_timestamp": "2026-09-10T12:00:04.939451Z"}, {"uuid": "a5a99e78-38e9-4fd3-b21f-8bdc0fba980e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/cissp/5212", "content": "Ukraine says recent coordinated cyberattacks on select government systems are part of a larger wave of malicious activity aimed at sabotaging the country's critical infrastructure.\nRead: https://thehackernews.com/2022/01/ukraine-recent-cyber-attacks-part-of.html\n\nRussian hackers are heavily leveraging malicious Traffic Direction System (TSD) to spread several malware families, including Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish.\nRead details: https://thehackernews.com/2022/01/russian-hackers-heavily-using-malicious.html\n\nMicrosoft has detected hackers exploiting a new zero-day vulnerability (CVE-2021-35247) in SolarWinds Serv-U software related to Log4j attacks.\nRead: https://thehackernews.com/2022/01/microsoft-hackers-exploiting-new.html\n\nServ-U version 15.3 has been released to patch the issue.\nCisco has released a security patch for a critical vulnerability (CVE-2022-20649) affecting RCM for Cisco StarOS that could be weaponized by an unauthenticated remote attacker to execute arbitrary code & take over vulnerable machines.\nDetails: https://thehackernews.com/2022/01/cisco-issues-patch-for-critical-rce.html", "creation_timestamp": "2026-09-11T00:00:40.538193Z"}]}