cisco-sa-ssm-access-nttb2dhE

csafUScisco_csaf

Cisco License (Smart Software Manager) On-Prem Vulnerabilities

Advisory ansehen veröffentlicht 2026-10-07

Multiple vulnerabilities in the web-based management interface and API endpoints of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow a remote attacker to gain unauthorized access, access sensitive information, cause a denial of service (DoS) condition, or elevate privileges. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. For further documentation of improvements and fixes in Cisco License On-Prem, see Cisco License (Smart Software Manager) On-Prem Security Hardening Release ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ssm-Ph77wdhf"].

01

beschreibt (4)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2026-76454UScritical9.1—
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remo…
CVE-2026-76452USmedium4.9—
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote at…
CVE-2026-76437USmedium4.9—
A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker…
CVE-2026-20328UScritical9.1OT erhöht—
A vulnerability in the web-based management interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (140)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan