[devicenull]

If sv_cheats 1 is activated, players can execute rcon commands. This attempts to prevent them from doing permanent damage with it, but.. you still shouldn't turn cheats on.

As far as the rcon exploit, it seems to be confined to servers running a malicious plugin.