CVE advisoryCRITICAL
CVE-2024-20419
Cisco SSM On-Prem Unauthenticated User Password Change Vulnerability
Halo Surface Signal: 4 out of 5 — likely to be public-facing.
A critical vulnerability exists in Cisco Smart Software Manager On-Prem affecting its authentication system, allowing unauthenticated attackers to change any user's password. Exploitation via crafted HTTP requests could grant attackers user or administrative privileges to the web UI or API. This management platform's p