Cisco Redundancy Configuration Manager vulnerabilities

CVE-2022-20649 [HIGH] CWE-489 CVE-2022-20649: A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, rem A vulnerability in Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform remote code execution on the application with root-level privileges in the context of the configured container. This vulnerability exists because the debug mode is incorrectly enabled for specific services. An attacker could exploit this

CVE-2022-20750 [HIGH] CWE-20 CVE-2022-20750: A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager ( A vulnerability in the checkpoint manager implementation of Cisco Redundancy Configuration Manager (RCM) for Cisco StarOS Software could allow an unauthenticated, remote attacker to cause the checkpoint manager process to restart upon receipt of malformed TCP data. This vulnerability is due to improper input validation of an ingress TCP packet. An atta

CVE-2022-20648 [MEDIUM] CWE-200 CVE-2022-20648: A vulnerability in a debug function for Cisco RCM for Cisco StarOS Software could allow an A vulnerability in a debug function for Cisco RCM for Cisco StarOS Software could allow an unauthenticated, remote attacker to perform debug actions that could result in the disclosure of confidential information that should be restricted. This vulnerability exists because of a debug service that incorrectly listens to and accepts incoming connectio