Zurück zur Liste

Cisco Smart Software Manager On-Prem Arbitrary Command Execution Vulnerability — CISCO-SA-SSM-CLI-EXECUTION-CHUCWUNR

Cisco · Cisco · CISCO-SA-SSM-CLI-EXECUTION-CHUCWUNR

ID
CISCO-SA-SSM-CLI-EXECUTION-CHUCWUNR
Datum
Activity
Quelle
Cisco
Vendor
Cisco
Risiko
critical

Zusammenfassung

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected SSM On-Prem host. This vulnerability is due to the unintentional exposure of an internal service. An attacker could exploit this vulnerability by sending a crafted request to the API of the exposed service. A…

Produkt

Cisco Smart Software Manager On-Prem Arbitrary Command Execution

Was tun?

Allgemeine, vorsichtige Schritte (bitte prüfe die offizielle Quelle für Details):

  • Priorisiere sofort Patches oder Mitigations (hohes akutes Risiko).
  • Identifiziere betroffene Produktversionen und prüfe, ob du betroffen bist.
  • Spiele Hersteller-Updates/Patches ein oder setze empfohlene Mitigations um.
  • Lies das offizielle Advisory für betroffene Versionen und konkrete Schritte.

Offizielles Advisory

Mehr dazu