PT-2024-5066 · Cisco · Cisco Smart Software Manager On-Prem

Mohammed Adel · Published 2024-07-17 · Updated 2026-03-13 · CVE-2024-20419

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Cisco Smart Software Manager On-Prem versions 8-202206 and earlier

Description: A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.

Recommendations: For Cisco Smart Software Manager On-Prem versions 8-202206 and earlier, update to a version that includes the fix for this vulnerability. As a temporary workaround, consider restricting access to the affected device to minimize the risk of exploitation. Avoid using the vulnerable authentication system until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-620

Related Identifiers

BDU:2024-05593

CVE-2024-20419

Affected Products

Cisco Smart Software Manager On-Prem

References · 42

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cisco_ssm_onprem_account.rb · Exploit
• 🔥 https://exploit-db.com/exploits/52155 · Exploit
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05593 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20419 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20419 · Vendor Advisory
• https://twitter.com/autumn_good_35/status/1823414797943365743 · Twitter Post
• https://twitter.com/Komodosec/status/1835079851323408897 · Twitter Post
• https://twitter.com/Dinosn/status/1822833100834894199 · Twitter Post
• https://twitter.com/transilienceai/status/1825986526750105881 · Twitter Post
• https://twitter.com/cyber_advising/status/1823689245875147153 · Twitter Post
• https://t.me/pentestingnews/50146 · Telegram Post
• https://t.me/pentestingnews/50253 · Telegram Post
• https://t.me/true_secator/5984 · Telegram Post
• https://secpod.com/blog/critical-flaw-in-ciscos-secure-email-gateways-allows-attackers-to-control-the-device-completely · Note