https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:24:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-05593 bdu:2024-05593 https://cve.radiocsirt.org/vuln/bdu:2024-05593 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0602 certfr-2024-avi-0602 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0602 https://cve.radiocsirt.org/vuln/cisco-sa-cssm-auth-slw3uhuy <p>A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-cssm-auth-slw3uhuy https://cve.radiocsirt.org/vuln/euvd-2026-217138 EUVD-2026-217138 https://cve.radiocsirt.org/vuln/euvd-2026-217138 https://cve.radiocsirt.org/vuln/fkie_cve-2024-20419 <p>A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.</p> <p>A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-20419 https://cve.radiocsirt.org/vuln/ghsa-5697-p67m-73p6 <p>A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users.</p> <p>This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.</p> <p>A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users.</p> <p>This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.</p> https://cve.radiocsirt.org/vuln/ghsa-5697-p67m-73p6 https://cve.radiocsirt.org/vuln/gsd-2024-20419 gsd-2024-20419 https://cve.radiocsirt.org/vuln/gsd-2024-20419 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1667 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Smart Software Manager On-Prem ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Cisco Smart Software Manager On-Prem ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1667