Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Smart Software Manager On-Prem Improper Access Control Vulnerability
Vulnerability Description
A vulnerability in the web application of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to create arbitrary user accounts. The vulnerability is due to the lack of authorization controls in the web application. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to add user accounts to the configuration of an affected device. These accounts would not be administrator or operator accounts.
CVSS Information
N/A
Vulnerability Type
访问控制不恰当
Vulnerability Title
Cisco Smart Software Manager On-Prem 访问控制错误漏洞
Vulnerability Description
Cisco Smart Software Manager On-Prem（SSM On-Prem）是美国思科（Cisco）公司的一款用于Cisco产品许可证管理的组件。 Cisco SSM On-Prem Release 8-202004之前版本中的Web应用程序存在访问控制错误漏洞，该漏洞源于缺少授权控制。远程攻击者可通过发送特制的HTTP请求利用该漏洞创建任意的用户账户。
CVSS Information
N/A
Vulnerability Type
N/A