Exploit for Cisco vulnerability allows admin password hijack

ISGroup Cybersecurity

Executive Summary

A critical vulnerability has been detected in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) that allows an unauthenticated remote attacker to change the password of any user, including administrators. This could lead to a complete compromise of the software infrastructure control. Cisco has released details regarding the exploit.

ProductCisco SSM On-Prem
Date2024-08-09 12:05:50

Technical Summary

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated remote attacker to change the password of any user, including administrative users.

Protect your organisation with Threat Intelligence and Digital Risk Protection.

Choose ISGroup for a practical, tailored engagement:

  • A focused assessment of your environment and requirements
  • Clear findings with a prioritised, actionable roadmap
  • Direct support from experienced specialists through remediation and implementation
Talk to an expert