Cisco Smart Software Manager On-Prem(SSM On-Prem)存在高風險安全漏洞(CVE-2024-20419),請儘速確認並進行修補

內容說明:

研究人員發現Cisco Smart Software Manager On-Prem(SSM On-Prem)存在未驗證之通行碼變更(Unverified Password Change)漏洞(CVE-2024-20419),允許未經身分鑑別之遠端攻擊者變更任意使用者密碼。

影響平台:

SSM On-Prem(SSM Satellite) 8-202212(不含)以前版本

處置建議:

官方已針對漏洞釋出修復更新,請參考官方說明進行更新,網址如下:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy

參考資料:

  1. https://nvd.nist.gov/vuln/detail/CVE-2024-20419
  2. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy