News Vulnerability in Cisco Smart Software Manager lets attackers change any user password

News

Команда форума
Редактор
Регистрация
17 Февраль 2018
Сообщения
41 105
Лучшие ответы
0
Реакции
0
Баллы
8 093
Offline
#1

Enlarge


Cisco on Wednesday disclosed a maximum-security vulnerability that allows remote threat actors with no authentication to change the password of any user, including those of administrators with accounts, on Cisco Smart Software Manager On-Prem devices.

The Cisco Smart Software Manager On-Prem resides inside the customer premises and provides a dashboard for managing licenses for all Cisco gear in use. It’s used by customers who can’t or don’t want to manage licenses in the cloud, as is more common.

In a bulletin, Cisco warns that the product contains a vulnerability that allows hackers to change any account's password. The severity of the vulnerability, tracked as CVE-2024-20419, is rated 10, the maximum score.


Read 4 remaining paragraphs | Comments
 
Яндекс.Метрика Рейтинг@Mail.ru
Сверху Снизу