Cisco Smart Licensing Utility Vulnerabilities
Multiple vulnerabilities in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to collect sensitive information or administer Cisco Smart Licensing Utility services on a system while the software is running. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-20440US | high7.5 | — | ||
A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.
This vulnerability is due to excessive verbosit… | ||||
| CVE-2024-20439US | critical9.8OT kritisch | KEV | ||
A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Security Vulnerability Policyexternal
- CSCwi41731external
- CSCwi47950external
- Cisco Smart Licensing Utility Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- free software updatesexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
Behebungen (2)
- BehobenCisco Smart License Utility
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Smart License Utility
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan