Vulnerability in Cisco Redundancy Configuration Manager
CVE-2022-20649
A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container…
EPSS: 0.116 (95.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Redundancy Configuration Manager — versions 2021.02.0, 2021.01.0, 21.19.n13
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2022-20649?
- CVE-2022-20649 is a high-severity vulnerability in Cisco Redundancy Configuration Manager, classified under Active Debug Code. CVSS score: 8.1/10. Published 2024-11-15.
- How severe is CVE-2022-20649?
- High severity. CVSS v3 base score is 8.1 out of 10.