CVE-2020-3443 (CNNVD-202008-959)
中文标题:
Cisco Smart Software Manager On-Prem 权限许可和访问控制问题漏洞
英文标题:
Cisco Smart Software Manager On-Prem Privilege Escalation Vulnerability
漏洞描述
中文描述:
Opera Software Opera是挪威Opera Software公司的一款Web浏览器，它支持多窗口浏览、自定义用户界面等功能。Cisco Smart Software Manager On-Prem（SSM On-Prem）是美国Cisco公司的一款用于Cisco产品许可证管理的组件。 Cisco SSM On-Prem中存在权限许可和访问控制问题漏洞。远程攻击者可借助System Operator角色利用该漏洞提升权限并执行命令。
英文描述:
A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could exploit this vulnerability by logging in with the System Operator role, performing a series of actions, and then assuming a new higher privileged role. A successful exploit could allow the attacker to perform all actions associated with the privilege of the assumed role. If that role is an administrative role, the attacker would gain full access to the device.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Smart Software Manager On-Prem | n/a | - | - |
cpe:2.3:a:cisco:cisco_smart_software_manager_on-prem:n_a:*:*:*:*:*:*:*
|
| cisco | smart_software_manager_on-prem | 8-202004 | - | - |
cpe:2.3:a:cisco:smart_software_manager_on-prem:8-202004:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2020-3443 |
2025-11-11 15:20:37 | 2025-11-11 07:36:19 |
| NVD | nvd_CVE-2020-3443 |
2025-11-11 14:57:02 | 2025-11-11 07:44:43 |
| CNNVD | cnnvd_CNNVD-202008-959 |
2025-11-11 15:10:29 | 2025-11-11 07:56:25 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 权限许可和访问控制问题
- cnnvd_id: 未提取 -> CNNVD-202008-959
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 2
- data_sources: ['cve'] -> ['cve', 'nvd']