Description
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application. This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cisco Cisco License On-Prem
Default version status: unknown
7-202001affected1.1affected6.3.0affected8-202004affected8-202006affected1.2affected1.3affected8-202012affected8-202010affected8-202008affected9-202201affected8-202102affected1.4affected8-202105affected8-202108affected8-202112affected8-202201affected8-202206affected8-202212affected8-202302affected8-202303affected8-202304affected8-202308affected8-202401affected8-202404affected9-202406affected9-202407affected9-202410affected9-202412affected9-202501affected9-202502affected9-202504affected9-202507affected9-202510affected9-202601affected10-202606affected