9.1
CVE-2026-76483
- EPSS -
- Veröffentlicht 07.10.2026 16:16:06
- Zuletzt bearbeitet 07.10.2026 19:17:41
- Erkennungen
Cisco License On-Prem Security Hardening Release
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76483 are related to issues with insufficiently protected credentials that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerCisco
≫
Produkt
Cisco License On-Prem
Default Statusunknown
Version
7-202001
Status
affected
Version
1.1
Status
affected
Version
6.3.0
Status
affected
Version
8-202004
Status
affected
Version
8-202006
Status
affected
Version
1.2
Status
affected
Version
1.3
Status
affected
Version
8-202012
Status
affected
Version
8-202010
Status
affected
Version
8-202008
Status
affected
Version
9-202201
Status
affected
Version
8-202102
Status
affected
Version
1.4
Status
affected
Version
8-202105
Status
affected
Version
8-202108
Status
affected
Version
8-202112
Status
affected
Version
8-202201
Status
affected
Version
8-202206
Status
affected
Version
8-202212
Status
affected
Version
8-202302
Status
affected
Version
8-202303
Status
affected
Version
8-202304
Status
affected
Version
8-202308
Status
affected
Version
8-202401
Status
affected
Version
8-202404
Status
affected
Version
9-202406
Status
affected
Version
9-202407
Status
affected
Version
9-202410
Status
affected
Version
9-202412
Status
affected
Version
9-202501
Status
affected
Version
9-202502
Status
affected
Version
9-202504
Status
affected
Version
9-202507
Status
affected
Version
9-202510
Status
affected
Version
9-202601
Status
affected
Version
10-202606
Status
affected
Version
10-202608
Status
affected
VulnDex Vulnerability Enrichment
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Cisco PSIRT | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-ssm-Ph77wdhf