Lucene search
+L

169 matches found

Cvelist
Cvelist
added 2020/02/19 7:15 p.m.26 views

CVE-2020-3158 Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.8CVSS9.4AI score0.02582EPSS
SaveExploits0References1
CVE
CVE
added 2020/02/19 7:15 p.m.86 views

CVE-2020-3158

Cisco Smart Software Manager On-Prem HA service contains a default, static password for a system account not controlled by the admin, enabling unauthenticated remote access to a sensitive part of the system with high privileges. Successful exploits could grant read/write access to system data, in...

9.8CVSS9.4AI score0.02582EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
added 2020/02/19 4:00 p.m.17 views

Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

9.8CVSS9.5AI score0.02582EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/01/29 12:00 a.m.14 views

The vulnerability of the API interface of the Cisco Smart Software Manager On-Prem administration license management software allows a perpetrator to trigger a service failure.

The vulnerability of the API interface of the Cisco Smart Software Manager On-Prem administration license software exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

8.5CVSS7.5AI score0.01073EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/01/26 5:15 a.m.12 views

CVE-2019-16029

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

9.1CVSS7.3AI score0.01073EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/26 5:15 a.m.20 views

CVE-2019-16029

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

9.1CVSS8.4AI score0.01073EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/26 4:31 a.m.9 views

CVE-2019-16029 Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

8.2CVSS7.2AI score0.01073EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/01/26 4:31 a.m.24 views

CVE-2019-16029 Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

A vulnerability in the application programming interface API of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change user account information which can prevent users from logging in, resulting in a denial of service DoS condition of the web interface. The...

8.2CVSS9.1AI score0.01073EPSS
SaveExploits0References1
CVE
CVE
added 2020/01/26 4:31 a.m.115 views

CVE-2019-16029

CVE-2019-16029 describes a vulnerability in the API of Cisco Smart Software Manager On-Prem Web Interface where an unauthenticated attacker can send crafted HTTP requests to exploit input validation flaws, potentially changing or corrupting user account information and causing a denial of service...

9.1CVSS8.4AI score0.01073EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder