Cisco Redundancy Configuration Manager Debug Remote Code Execution Vulnerability

published 2024-11-15 23 mo ago modified 2026-06-17 4 mo ago also EUVD-2022-25899

cvss: 8.1; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 12.0%; EPSS 12.0% chance of exploitation in 30 days, percentile 96%
public exploits: 0; none known

A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container.

This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this vulnerability by connecting to the device and navigating to the service with debug mode enabled. A successful exploit could allow the attacker to execute arbitrary commands as the root user. The attacker would need to perform detailed reconnaissance to allow for unauthenticated access. The vulnerability can also be exploited by an authenticated attacker. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Patch / fix

fixed in 1

cisco redundancy_configuration_manager 21.25.4

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 23 mo ago (2024-11-15)

Exploit prediction

11.96% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Cisco Cisco Redundancy Configuration Manager
cisco redundancy_configuration_manager

Classification

Weakness

CWE-489 Active Debug Code

References

Sources

CVE List CVE-2022-20649
NVD CVE-2022-20649

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary