CVE-2022-20808: Uncontrolled Resource Consumption

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to incorrect handling of multiple simultaneous device registrations on Cisco SSM On-Prem. A...

Cisco Smart Software Manager On-Prem和Cisco Smart Software Manager 资源管理错误漏洞

Cisco Smart Software Manager On-Prem SSM On-Prem and Cisco Smart Software Manager are both products of Cisco Corporation.Cisco Smart Software Manager On-Prem is a component of Cisco product license management. Cisco Smart Software Manager On-Prem is a component for license management of Cisco...

PT-2022-3514

Name of the Vulnerable Software and Affected Versions Cisco Smart Software Manager On-Prem affected versions not specified Description The issue is related to a denial of service DoS condition that can be caused by an authenticated, remote attacker. This is due to incorrect handling of multiple...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool relates to insecure management of privileges. This allows an attacker to elevate their privileges and create, read, update, or delete records and settings.

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to enhance their privileges and create, read, update, or delete records and settings...

CVE-2021-34766

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

CVE-2021-34766

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

CVE-2021-34766 Cisco Smart Software Manager Privilege Escalation Vulnerability

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

Cisco Smart Software Manager Privilege Escalation Vulnerability

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

Cisco Smart Software Manager 安全漏洞

Cisco Smart Software Manager is the United States Cisco Cisco company for the provision of license intelligent management features of the software. The software eliminates cumbersome product activation key PAK and license file management, so that the license node is no longer locked to the device...

CVE-2021-34766: Improper Privilege Management

A vulnerability in the web UI of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and create, read, update, or delete records and settings in multiple functions. This vulnerability is due to insufficient authorization of the Syst...

PT-2021-5720

Name of the Vulnerable Software and Affected Versions Cisco Smart Software Manager On-Prem SSM On-Prem affected versions not specified Description A vulnerability in the web UI of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges and create,...

3S-Smart Software Solutions CODESYS Control runtime system 缓冲区错误漏洞

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device to an IEC 61131-3 controller. A security vulnerability exists in 3S-Smart Software Solutions CODESYS Control...

SQL Injection Vulnerability in ThinkSNS of Chengdu Zhiyi Chuangxue Technology Co.

ThinkSNS TS for short, is the open source microblogging, social networking system under the Wise Software, including microblogging, forums, information, channels, shopping centers, activities, location, find people, live broadcasts, Q&A and a series of features. ThinkSNS has a SQL injection...

3S-Smart Software Solutions CODESYS V2 Web-Server Out-of-Bounds Write Vulnerability

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An out-of-bounds write vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with a...

3S-Smart Software Solutions CODESYS V2 Web-Server Access Control Error Vulnerability

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. An access control error vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the...

3S-Smart Software Solutions CODESYS V2 Web-Server Buffer Overflow Vulnerability

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker with the help ...

3S-Smart Software Solutions CODESYS Control runtime system buffer overflow vulnerability (CNVD-2021-37673)

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. A buffer overflow vulnerability exists in 3S-Smart Software Solutions CODESYS...

3S-Smart Software Solutions CODESYS Control runtime system buffer overflow vulnerability

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. A buffer overflow vulnerability exists in the 3S-Smart Software Solutions CODESY...

3S-Smart Software Solutions CODESYS V2 Web-Server Security Check Bypass Vulnerability

3S-Smart Software Solutions CODESYS V2 Web-Server is an application from 3S-Smart Software Solutions, Germany. A web server. A security check bypass vulnerability exists in 3S-Smart Software Solutions CODESYS V2 Web-Server versions prior to 1.1.9.20, which can be exploited by an attacker to bypas...

The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administration tool allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges remotely...