Lucene search
+L

190 matches found

CVE
CVE
•added 2020/02/19 7:15 p.m.•91 views

CVE-2020-3158

Cisco Smart Software Manager On-Prem HA service contains a default, static password for a system account not controlled by the admin, enabling unauthenticated remote access to a sensitive part of the system with high privileges. Successful exploits could grant read/write access to system data, in...

9.8CVSS9.4AI score0.02582EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2020/02/19 4:00 p.m.•18 views

Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.8CVSS9.5AI score0.02582EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/19 12:00 a.m.•4 views

CVE-2020-3158: Use of Hard-coded Credentials

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.8CVSS8.1AI score0.02582EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/01/29 12:00 a.m.•15 views

The vulnerability of the API interface of the Cisco Smart Software Manager On-Prem administration license management software allows a perpetrator to trigger a service failure.

The vulnerability of the API interface of the Cisco Smart Software Manager On-Prem administration license software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

8.5CVSS7.5AI score0.01073EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2020/01/26 5:15 a.m.•21 views

CVE-2019-16029

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

9.1CVSS8.4AI score0.01073EPSS
SaveExploits0References1
OSV
OSV
•added 2020/01/26 5:15 a.m.•14 views

CVE-2019-16029

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

9.1CVSS7.3AI score0.01073EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/01/26 4:31 a.m.•9 views

CVE-2019-16029 Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

8.2CVSS7.2AI score0.01073EPSS
SaveExploits0References1
CVE
CVE
•added 2020/01/26 4:31 a.m.•120 views

CVE-2019-16029

CVE-2019-16029 describes a vulnerability in the API of Cisco Smart Software Manager On-Prem Web Interface where an unauthenticated attacker can send crafted HTTP requests to exploit input validation flaws, potentially changing or corrupting user account information and causing a denial of service...

9.1CVSS8.4AI score0.01073EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/01/26 4:31 a.m.•27 views

CVE-2019-16029 Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

8.2CVSS9.1AI score0.01073EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/26 12:00 a.m.•4 views

CVE-2019-16029: Improper Input Validation

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

9.1CVSS7.6AI score0.01073EPSS
SaveExploits0References3
Rows per page
Query Builder