Cisco Smart Software Manager On-Prem Password Change Vulnerability
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-20419US | — | Exploit | ||
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any use… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- Cisco Smart Software Manager On-Prem Password Change Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- free software updatesexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- Cisco Support and Downloads pageexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
Behebungen (1)
- BehobenCisco Smart Software Manager On-Prem
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan