CVE-2024-20419
CriticalCVSS 10.0Exploitation Probability (EPSS)
Very high risk100th percentile - higher than 100% of all known CVEs
Summary
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This is due to improper implementation of the password-change process; an attacker could send crafted HTTP requests to access the web UI or API with the privileges of the compromised user.
Risk Assessment
An attacker could take over an administrative account and gain full control of the SSM On-Prem system, resulting in high impact on confidentiality, integrity, and availability.
Recommendation
Apply the available Cisco security updates for SSM On-Prem. Until patched, restrict network access to the management interface.
Other vulnerabilities in Cisco Smart Software Manager On-Prem
See all- CVE-2026-20160Critical
A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) allows an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. The issue is due to unintentional exposure of an internal service.
- CVE-2026-20151High
A vulnerability in the web interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) allows an authenticated remote attacker to elevate privileges. The issue stems from improper transmission of sensitive user information, enabling session credential retrieval from status messages.
Original NVD description (English source)
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS