PT-2021-1875

Name of the Vulnerable Software and Affected Versions Cisco Smart Software Manager Satellite affected versions not specified Description The issue is related to the web-based management interface of Cisco Smart Software Manager Satellite, where improper validation of values within SQL queries...

PT-2021-1813 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1815 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1954 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1868 · Cisco · Cisco Smart Software Manager Satellite +1

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager Satellite affected versions not specified Cisco Smart Software Manager On-Prem affected versions not specified Description: The issue is related to multiple vulnerabilities in the web UI of Cisco Smart Software...

PT-2021-1898

Name of the Vulnerable Software and Affected Versions Cisco Smart Software Manager On-Prem affected versions not specified Cisco Smart Software Manager Satellite affected versions not specified Description The issue is related to insufficient input validation and protection of static credentials ...

PT-2021-1877

Name of the Vulnerable Software and Affected Versions Cisco Smart Software Manager On-Prem affected versions not specified Cisco Smart Software Manager satellite affected versions not specified Description The issue is related to the web management interface of Cisco Smart Software Manager, where...

CVE-2021-1218: URL Redirection to Untrusted Site

A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an...

Cisco Smart Software Manager has a vulnerability related to input validation.

Cisco Smart Software Manager Satellite is a Cisco component for Cisco product license management. An open redirection vulnerability exists in the web management interface of Cisco Smart Software Manager Satellite 5.0 and earlier versions. The vulnerability stems from improper validation of the...

Cisco Smart Software Manager Privilege Escalation

The vulnerability of the Cisco Smart Software Manager On-Prem licensing management software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2020-3443

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...

CVE-2020-3443

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...

Authorization

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...

CVE-2020-3443 Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...

CVE-2020-3443

CVE-2020-3443 concerns Cisco Smart Software Manager On-Prem (SSM On-Prem). Root cause: insufficient authorization of the System Operator role capabilities, enabling an authenticated remote attacker to log in as System Operator, perform actions, and assume a higher privileged role. Impact: could g...

CVE-2020-3443: Missing Authorization

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...

Cisco Critical Flaw Patched in WAN Software Solution

Cisco patched a critical flaw in its wide area network WAN software solution for enterprises, which if exploited could give remote, unauthenticated attackers administrator privileges. The flaw exists in Cisco Virtual Wide Area Application Services vWAAS, which is software that Cisco describes as ...

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...

PT-2020-3772

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager On-Prem affected versions not specified Description: A vulnerability in Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher...

CVE-2020-3245

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...