Description
A vulnerability in the Cisco Smart Licensing Utility API of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an unauthenticated, remote attacker to write arbitrary files to the system or cause a DoS condition on an affected application.
This vulnerability is due to improper input validation and a lack of authentication in the management API. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to modify system files or cause a DoS condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | Cisco License On-Prem | 7-202001, 1.1, 6.3.0, 8-202004, 8-202006, 1.2, 1.3, 8-202012, 8-202010, 8-202008, 9-202201, 8-202102, 1.4, 8-202105, 8-202108, 8-202112, 8-202201, 8-202206, 8-202212, 8-202302, 8-202303, 8-202304, 8-202308, 8-202401, 8-202404, 9-202406, 9-202407, 9-202410, 9-202412, 9-202501, 9-202502, 9-202504, 9-… | — |
Advisories 2
- NCSC-2026-0407 Kwetsbaarheden verholpen in Cisco License On-Prem NCSC-NL (Netherlands) · Oct 8, 2026
- WID-SEC-2026-3798 Cisco License On-Prem: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 7, 2026