CVE-2024-20439

Product

Cisco / Smart Licensing Utility

Vulnerability

Cisco Smart Licensing Utility Static Credential Vulnerability

Added to KEV

Mar 31, 2025

Remediate by

Apr 21, 2025

Known ransomware use

No

Summary description

Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notes

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw ; https://nvd.nist.gov/vuln/detail/CVE-2024-20439