جزئیات آسیب‌پذیری
CVE-2026-76483
Cisco License On-Prem
Cisco License On-Prem Security Hardening Release
CVSS 3.1
9.1بحرانی
شرح رسمی (انگلیسی)
As part of Cisco's ongoing commitment to proactive security and product quality, the engineering team for Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76483 are related to issues with insufficiently protected credentials that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-522.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.1بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco License On-Prem | 1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 1.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 1.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 1.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 10-202606 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 10-202608 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 6.3.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 7-202001 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202004 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202006 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202008 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202010 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202012 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202102 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202105 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202108 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202112 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202201 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202206 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202212 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202302 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202303 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202304 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202308 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202401 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 8-202404 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202201 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202406 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202407 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202410 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202412 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202501 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202502 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202504 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202507 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202510 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco License On-Prem | 9-202601 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۲
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۷/۱۵
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۶
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیش‌بینی بهره‌برداری (EPSS)
۰٫۲۲٪
احتمال بهره‌برداری در ۳۰ روز
۱۲٫۹٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-522Insufficiently Protected Credentials