CVE-2024-20439

Producto

Cisco / Smart Licensing Utility

Vulnerabilidad

Cisco Smart Licensing Utility Static Credential Vulnerability

Añadido a KEV

31 mar 2025

Remediar antes de

21 abr 2025

Uso conocido en ransomware

No

Descripción resumida

Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw ; https://nvd.nist.gov/vuln/detail/CVE-2024-20439