Cisco.Smart.Licensing.Utility.Static.Credential.Security.Bypass

description-logoDescription

This indicates an attack attempt to exploit a Security Bypass Vulnerability in Cisco Smart Licensing Utility (CSLU).
The vulnerability is due to an error in the vulnerable application when handling a maliciously crafted request. An attacker can exploit this to gain administrator privileges in the affected system.

affected-products-logoAffected Products

Cisco Smart License Utility from 2.0.0 to 2.2.0

Impact logoImpact

Security Bypass: Remote attackers can bypass security checks of vulnerable systems.

recomended-action-logoRecommended Actions

Refer to the vendor's web site for the suggested workaround:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Status Detail
2025-05-20 32.010
Modified
Default_action:pass:drop
2025-05-07 32.003
New