Cisco Smart License Utility vulnerabilities

2 known vulnerabilities in Cisco Smart License Utility from Cisco. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Cisco Smart License Utility: Insertion of Sensitive Information into Log File

  CVE-2024-20440Sep 4, 2024CiscoEPSS 51.9%

  A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a cr

• 9.8 Critical severity

  Cisco Smart Licensing Utility Static Credential Exploited

  CVE-2024-20439Sep 4, 2024CiscoEPSS 97.1%

  A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential. This vulnerability is due to an undocumented static user credential for an admin