Authorization

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...

CVE-2020-3245 Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...

CVE-2020-3245

The CVE-2020-3245 issue affects Cisco Smart Software Manager On-Prem (SSM On-Prem) in its web application. A lack of authorization controls allows an unauthenticated, remote attacker to craft HTTP requests that add arbitrary user accounts to the device configuration (these will not be admin or op...

CVE-2020-3245 Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...

CVE-2020-3245: Improper Access Control

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...

Cisco Smart Software Manager On-Prem Access Control Error Vulnerability

Cisco Smart Software Manager On-Prem SSM On-Prem is a Cisco component for Cisco product license management. An Access Control Error vulnerability exists in web applications in versions prior to Cisco SSM On-Prem Release 8-202004, which stems from a lack of authorization controls. A remote attacke...

Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability

A vulnerability in the web application of Cisco Smart Software Manager On-Prem SSM On-Prem could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this...

PT-2020-2965

Name of the Vulnerable Software and Affected Versions Cisco Smart Software Manager On-Prem SSM On-Prem affected versions not specified Description A vulnerability in the web application of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to create arbitrary use...

Intel AMT and ISM Buffer Overflow Vulnerability (CNVD-2020-34707)

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A buffer...

Intel AMT and ISM Buffer Overflow Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A buffer...

Intel AMT and ISM Denial of Service Vulnerabilities

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A denial ...

Intel AMT and ISM Input Validation Error Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. An input...

Intel AMT and ISM Resource Management Error Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A resourc...

Information Disclosure

The vulnerability of the Cisco Smart Software Manager On-Premise administration software’s high availability feature is related to the presence of a statistical password for the standard account. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read and...

Critical Cisco Bug Opens Software Licencing Manager to Remote Attack

A critical flaw in the High Availability HA service of Cisco Smart Software Manager On-Prem Base has been uncovered, which would open the door to remote attackers thanks to its use of a static, default password, even if the platform isn’t directly connected to the internet. Cisco Smart Software...

CVE-2020-3158

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities, see the Cisco Security Advisories page. The...

CVE-2020-3158

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...

CVE-2020-3158

Cisco Smart Software Manager On-Prem HA service contains a default, static password for a system account not controlled by the admin, enabling unauthenticated remote access to a sensitive part of the system with high privileges. Successful exploits could grant read/write access to system data, in...

CVE-2020-3158 Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

A vulnerability in the High Availability HA service of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to access a sensitive part of the system with a high-privileged account. The vulnerability is due to a system account that has a default and static password...