CVE-2024-20439

Produto

Cisco / Smart Licensing Utility

Vulnerabilidade

Cisco Smart Licensing Utility Static Credential Vulnerability

Adicionado ao KEV

31 de mar. de 2025

Corrigir até

21 de abr. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Cisco Smart Licensing Utility contains a static credential vulnerability that allows an unauthenticated, remote attacker to log in to an affected system and gain administrative credentials.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw ; https://nvd.nist.gov/vuln/detail/CVE-2024-20439