思科緊急修補SSM On-Prem可被用來變更密碼的安全漏洞
支付動態 · 2024-07-18
7月17日思科公告修補CVSS評分高達10的資安漏洞CVE-2024-20419，將允許未經身分驗證的駭客，自遠端變更任何SSM On-Prem用戶的密碼
思科（Cisco）周三（7/17）緊急修補Cisco Smart Software Manager On-Prem（SSM On-Prem）上的一個安全漏洞，此一編號為CVE-2024-20419的漏洞將允許未經身分驗證的駭客，自遠端變更任何SSM On-Prem用戶的密碼，包括具備管理權限的用戶在內。
SSM On-Prem為思科的本地端部署解決方案，主要用來管理及監控企業內部的思科授權，此一漏洞影響Cisco SSM On-Prem與SSM Satellite。根據思科的說明，這兩個是同樣的產品，只是7.0以前稱為SSM Satellite，自7.0起更名為Cisco SSM On-Prem。
根據思科的說明，該漏洞源自於密碼變更程序實施不當，使得駭客只要傳送一個特製的HTTP請求至受害裝置上，便能觸發此一漏洞，允許駭客以受駭用戶的權限來存取網頁介面或API，其CVSS風險評分高達10。
現階段思科尚未收到CVE-2024-20419漏洞遭到濫用的報告，但強調除了部署修補程式之外，並無其它變通辦法。
熱門文章
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Kazakhstan plans to penalise online casino promotions
Regulation
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
