Lucene search
+L

250 matches found

CNVD
CNVD
•added 2020/06/11 12:00 a.m.•17 views

Intel AMT and ISM Denial of Service Vulnerabilities

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A denial ...

7.5CVSS6.8AI score0.02952EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/06/11 12:00 a.m.•37 views

Intel AMT and ISM Resource Management Error Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A resourc...

9.8CVSS7.1AI score0.03437EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/06/11 12:00 a.m.•19 views

Intel AMT and ISM Input Validation Error Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. An input...

7.5CVSS6.8AI score0.02213EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/03/10 12:00 a.m.•15 views

The vulnerability of the High Availability service of the Cisco Smart Software Manager On-Prem administration tool allows a hacker to gain access to read and write system files.

The vulnerability of the Cisco Smart Software Manager On-Premise administration software’s high availability feature is related to the presence of a statistical password for the standard account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read and...

9.4CVSS7.7AI score0.02582EPSS
SaveExploits0References4Affected Software1
ThreatPost
ThreatPost
•added 2020/02/20 5:29 p.m.•92 views

Critical Cisco Bug Opens Software Licencing Manager to Remote Attack

A critical flaw in the High Availability HA service of Cisco Smart Software Manager On-Prem Base has been uncovered, which would open the door to remote attackers thanks to its use of a static, default password, even if the platform isn’t directly connected to the internet. Cisco Smart Software...

8.8CVSS0.8AI score0.05272EPSS
SaveExploits1References11
CISA
CISA
•added 2020/02/20 12:00 a.m.•21 views

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. The...

7.2AI score
SaveExploits0References8
attackerkb
attackerkb
•added 2020/02/20 12:00 a.m.•31 views

CVE-2020-3158

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.8CVSS0.3AI score0.02582EPSS
SaveExploits0References2
OSV
OSV
•added 2020/02/19 8:15 p.m.•14 views

CVE-2020-3158

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.1CVSS7.3AI score0.02582EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/02/19 7:15 p.m.•28 views

CVE-2020-3158 Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.8CVSS9.4AI score0.02582EPSS
SaveExploits0References1
CVE
CVE
•added 2020/02/19 7:15 p.m.•91 views

CVE-2020-3158

Cisco Smart Software Manager On-Prem HA service contains a default, static password for a system account not controlled by the admin, enabling unauthenticated remote access to a sensitive part of the system with high privileges. Successful exploits could grant read/write access to system data, in...

9.8CVSS9.4AI score0.02582EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
•added 2020/02/19 4:00 p.m.•18 views

Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.8CVSS9.5AI score0.02582EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/19 12:00 a.m.•4 views

CVE-2020-3158: Use of Hard-coded Credentials

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.8CVSS8.1AI score0.02582EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/01/29 12:00 a.m.•15 views

The vulnerability of the API interface of the Cisco Smart Software Manager On-Prem administration license management software allows a perpetrator to trigger a service failure.

The vulnerability of the API interface of the Cisco Smart Software Manager On-Prem administration license software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

8.5CVSS7.5AI score0.01073EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2020/01/26 5:15 a.m.•13 views

CVE-2019-16029

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

9.1CVSS7.3AI score0.01073EPSS
SaveExploits0References1
NVD
NVD
•added 2020/01/26 5:15 a.m.•21 views

CVE-2019-16029

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

9.1CVSS8.4AI score0.01073EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2020/01/26 4:31 a.m.•9 views

CVE-2019-16029 Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

8.2CVSS7.2AI score0.01073EPSS
SaveExploits0References1
CVE
CVE
•added 2020/01/26 4:31 a.m.•120 views

CVE-2019-16029

CVE-2019-16029 describes a vulnerability in the API of Cisco Smart Software Manager On-Prem Web Interface where an unauthenticated attacker can send crafted HTTP requests to exploit input validation flaws, potentially changing or corrupting user account information and causing a denial of service...

9.1CVSS8.4AI score0.01073EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/01/26 4:31 a.m.•25 views

CVE-2019-16029 Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

8.2CVSS9.1AI score0.01073EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/26 12:00 a.m.•4 views

CVE-2019-16029: Improper Input Validation

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

9.1CVSS7.6AI score0.01073EPSS
SaveExploits0References3
Cisco
Cisco
•added 2020/01/22 4:00 p.m.•51 views

Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

8.2CVSS2AI score0.01073EPSS
SaveExploits0References1
Rows per page
Query Builder