Description
A vulnerability in the authentication system of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an unauthenticated, remote attacker to change the password of any user, including administrative users.
This vulnerability is due to improper implementation of the password-change process. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow an attacker to access the web UI or API with the privileges of the compromised user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco Smart Software Manager On-Prem | 8-202206 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Cisco Smart Software Manager (SSM) On-Prem Account Takeover (CVE-2024-20419)
auxiliary/admin/http/cisco_ssm_onprem_account
Exploit-DB 1
- Cisco Smart Software Manager On-Prem 8-202206 - Account Takeover EDB-52155 · webapps · Apr 10, 2025
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Cisco SSM On-Prem <= 8-202206 - Password Reset Account Takeover http/cves/2024/CVE-2024-20419.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 2
- WID-SEC-2024-1667 Cisco Smart Software Manager On-Prem: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Aug 11, 2024
- NCSC-2024-0315 Kwetsbaarheid verholpen in Cisco Smart Software Manager On-Prem NCSC-NL (Netherlands) · Jul 19, 2024