Lucene search
+L

51 matches found

Nuclei
Nuclei
•added 2026/10/26 2:10 a.m.•76 views

Hardcoded Admin Credentials For Cisco Smart Licensing Utility API

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to log in to an affected system by using a static administrative credential.This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit...

9.8CVSS8.7AI score0.9709EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/09 12:00 a.m.•14 views

Cisco License (Smart Software Manager) On-Prem Multiple Vulnerabilities (cisco-sa-ssm-access-nttb2dhE)

According to its self-reported version, Cisco License On-Prem formerly Cisco Smart Software Manager On-Prem is affected by multiple vulnerabilities, including: - A vulnerability in the web-based management interface of Cisco License On-Prem could allow an unauthenticated, remote attacker to gain...

9.1CVSS7AI score0.00582EPSS
SaveExploits0References9
NVD
NVD
•added 2026/10/07 5:16 p.m.•27 views

CVE-2026-76454

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

9.1CVSS0.00582EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/07 4:12 p.m.•48 views

CVE-2026-76454 Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

9.1CVSS0.00582EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/07 4:12 p.m.•15 views

EUVD-2026-94454

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

9.1CVSS8.4AI score0.00582EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/07 4:12 p.m.•44 views

CVE-2026-76454

A vulnerability exists in the Cisco Smart Licensing Utility API of Cisco License On-Prem (formerly Cisco Smart Software Manager On-Prem). Due to improper input validation and a lack of authentication in the management API, an unauthenticated remote attacker can send a crafted request to write arb...

9.1CVSS8.3AI score0.00582EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/07 12:00 a.m.•11 views

CVE-2026-76454: Relative Path Traversal

A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem SSM On-Prem, could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This...

9.1CVSS8.4AI score0.00582EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2017-3850

Malware in sbrugna...

9CVSS8AI score0.03802EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•31 views

EUVD-2025-13919

Malicious code in bioql PyPI...

5.9CVSS6.2AI score0.00294EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/09 6:08 p.m.•29 views

CVE-2025-20157

A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smar...

5.9CVSS6.2AI score0.00294EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/05/07 6:15 p.m.•22 views

CVE-2025-20157

A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smar...

5.9CVSS6.2AI score0.00294EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/05/07 5:17 p.m.•17 views

CVE-2025-20157 Cisco Catalyst vManage Certificate Validation Vulnerability

A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smar...

5.9CVSS6.2AI score0.00294EPSS
SaveExploits0References1
CVE
CVE
•added 2025/05/07 5:17 p.m.•87 views

CVE-2025-20157

Cisco Catalyst SD-WAN Manager (Cisco SD-WAN vManage) contains a certificate validation vulnerability in the Smart Licensing workflow. The issue arises from improper validation of certificates used by Smart Licensing, allowing an unauthenticated, remote attacker with network access to intercept tr...

5.9CVSS6.2AI score0.00294EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/07 12:00 a.m.•5 views

CVE-2025-20157: Improper Certificate Validation

A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smar...

5.9CVSS6.2AI score0.00294EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/05/07 12:00 a.m.•21 views

PT-2025-20253 · Cisco · Cisco Catalyst Sd-Wan Manager

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst SD-WAN Manager versions affected versions not specified Description: A vulnerability in certificate validation processing could allow an unauthenticated, remote attacker to gain access to sensitive information. This issue is du...

5.9CVSS6.1AI score0.00294EPSS
SaveExploits0References4
CISA
CISA
•added 2025/03/31 12:00 p.m.•96 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-20439link is external Cisco Smart Licensing Utility Static Credential Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cybe...

9.8CVSS8.7AI score0.9709EPSS
SaveIn wildExploits0References6
The Hacker News
The Hacker News
•added 2025/03/21 5:09 a.m.•40 views

Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility

Two now-patched security flaws impacting Cisco Smart Licensing Utility are seeing active exploitation attempts, according to SANS Internet Storm Center. The two critical-rated vulnerabilities in question are listed below - CVE-2024-20439 CVSS score: 9.8 - The presence of an undocumented static us...

9.8CVSS6.5AI score0.9709EPSS
SaveExploits3
VulnCheck KEV
VulnCheck KEV
•added 2025/02/27 12:00 a.m.•18 views

VulnCheck KEV: CVE-2024-20439

Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials...

9.8CVSS8.8AI score0.9709EPSS
SaveIn wildExploits0References639
RedhatCVE
RedhatCVE
•added 2025/02/05 1:16 a.m.•19 views

CVE-2024-20439

A vulnerability in Cisco Smart Licensing Utility CSLU could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential. This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could...

9.8CVSS8.7AI score0.9709EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 1:14 a.m.•22 views

CVE-2024-20440

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected...

7.5CVSS8.7AI score0.51897EPSS
SaveExploits0References1
Rows per page
Query Builder