Cisco’s Nightmare: Critical Password Vulnerability Exposes Admins to Attack
Cisco patches severe vulnerability in SSM On-Prem, preventing attackers from changing user passwords, including admin credentials. Tracked as CVE-2024-20419, this flaw affects versions before Release 7.0. No workarounds exist; upgrade immediately.
Hot Take:
Looks like Cisco’s Smart Software Manager wasn’t smart enough to change its own password without letting attackers in! It’s 2024, and we’re still struggling with password management. Who needs a hacker when you’ve got such vulnerabilities doing the job for them?
Key Points:
- Cisco patched a severe vulnerability (CVE-2024-20419) in Cisco Smart Software Manager On-Prem.
- The flaw allows attackers to change any user’s password remotely, including admin accounts.
- This vulnerability affects SSM On-Prem versions earlier than Release 7.0 (SSM Satellite).
- No workarounds are available; admins must upgrade to a fixed release to secure their systems.
- Earlier this year, Cisco also patched other significant vulnerabilities, including a zero-day in NX-OS.
Already a member? Log in here