Vulnslist

find the latest Cisco vulnerabilities

Cisco Smart Licensing Utility Vulnerabilities

cisco-sa-cslu-7gHMzWmw · Critical · Published · Updated

Multiple vulnerabilities in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to collect sensitive information or administer Cisco Smart Licensing Utility services on a system while the software is running. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. For more information about these vulnerabilities, see the Details section of this advisory. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2024-20439, CVE-2024-20440
Cisco Bug IDsCSCwi47950, CSCwi41731
CVSS ScoreBase 7.5
Base 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:X/RL:X/RC:X
Base 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco Smart License Utility

Related Products

Product CVE Evidence
Cisco Smart License Utility CVE-2024-20439 Cisco OpenVuln
Cisco Smart License Utility CVE-2024-20440 Cisco OpenVuln