Vulnslist

find the latest Cisco vulnerabilities

CVE-2024-20440

A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.

SeverityHIGH
CVSS7.5
CWECWE-532
KEV
Published
Modified

Related Products

Product Advisory
Cisco RV Series Routers cisco-sa-cslu-7gHMzWmw
Cisco Nexus Dashboard cisco-sa-cslu-7gHMzWmw
Cisco Smart License Utility cisco-sa-cslu-7gHMzWmw