CVE-2022-20939

CWE-9224 documents4 sources
Severity
4.3MEDIUM
EPSS
0.2%
top 55.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Smart Software Manager On-premCisco Smart Software Manager SatelliteCisco Cisco Smart Software Manager On-prem
Timeline
PublishedNov 15

Description

A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate privileges on an affected system. This vulnerability is due to inadequate protection of sensitive user information. An attacker could exploit this vulnerability by accessing certain logs on an affected system. A successful exploit could allow the attacker to use the obtained information to elevate privileges to System Admin.Cisco has released soft…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-497w-6wcv-pw45: A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem could allow an authenticated, remote attacker to elevate↗2024-11-15
▶
CVEList
Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability↗2024-11-15
▶

📋Vendor Advisories

1
Cisco
Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability↗2022-10-05
▶
CVE-2022-20939 (MEDIUM CVSS 4.3) | A vulnerability in the web-based ma | cvebase.io