Cisco Smart Licensing Utility Vulnerabilities
Multiple vulnerabilities in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to collect sensitive information or administer Cisco Smart Licensing Utility services on a system while the software is running. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20440US | high7.5 | — | ||
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.
This vulnerability is due to excessive verbosit… | ||||
| CVE-2024-20439US | critical9.8OT critical | KEV | ||
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- CSCwi41731external
- CSCwi47950external
- Cisco Smart Licensing Utility Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- free software updatesexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
remediations (2)
- FixedCisco Smart License Utility
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Smart License Utility
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan