Cisco disclosed a maximum-security vulnerability allowing remote attackers to change any user's password, including administrators, on Cisco Smart Software Manager On-Prem devices.
The vulnerability is due to improper implementation of the password-change process, enabling attackers to access the web UI or API with compromised user privileges.
There are no workarounds available to mitigate the threat, but a security update has been released by Cisco to address the vulnerability.
After gaining administrative control, attackers could potentially pivot to other connected Cisco devices, leading to data theft, file encryption, or similar malicious actions.
Collection
[
|
...
]