Cisco Patches Critical Vulnerability CVE-2022-22948 in Smart Software Manager On-Prem

Jul 17, 2024, 11:50 PM

Cisco has identified a critical vulnerability in its Smart Software Manager On-Prem (SSM On-Prem) that allows attackers to change any user's password, including those of administrators. The flaw, tracked as CVE-2022-22948, can be exploited using crafted HTTP requests. Cisco has released a patch to address this issue and urges all users to update their systems immediately to prevent potential exploitation. The vulnerability was reported by Security Affairs and The Hacker News.