Cisco Smart Software Manager On-Prem any version

A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.

Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability

Cisco Smart Software Manager On-Prem Web Interface Denial of Service Vulnerability

Cisco Smart Software Manager Privilege Escalation Vulnerability

Cisco Smart Software Manager Satellite SQL Injection Vulnerability

Cisco Smart Software Manager Satellite Static Credential Vulnerability

Cisco Smart Software Manager On-Prem Denial of Service Vulnerability

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability

Cisco Smart Software Manager On-Prem SQL Injection Vulnerability

Cisco Smart Software Manager Satellite Open Redirect Vulnerability

Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability

Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability