CVE-2024-20419 Scanner
CVE-2024-20419 Scanner - Account Takeover vulnerability in Cisco SSM On-Prem
Used 2.5k times · 3.4k assets checked · domain, ipv4, subdomain
CVE
CVE-2024-20419
10.0
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users. This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
cisco smart software manager on-premsmart_software_manager_on-prem
Updated Oct 12, 2026View on NVD →
S4E scanner
CVE history: cisco smart software manager on-prem
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →