References https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy https://nvd.nist.gov/vuln/detail/CVE-2024-20419 https://www.tenable.com/blog/cve-2024-20419-cisco-smart-software-manager-on-prem-password-change-vulnerability https://cn-sec.com/archives/2971244.html https://www.ithome.com.tw/news/164005 https://starmap.dbappsecurity.com.cn/info/6035 https://www.anquanke.com/post/id/298030 https://avd.aliyun.com/detail?id=AVD-2024-20419 https://www.tenablecloud.cn/plugins/nessus/205263
Related Vulnerabilities旭辰資訊|SmartIT Desktop Manager - 存在4個漏洞中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code ExecutionPoCccm-detect: Clear-Com Core Configuration Manager Panel - Detect智慧物联网综合服务平台ListFileManager存在目录枚举漏洞Cisco ISE /admin/files-upload/ 文件上传漏洞(CVE-2025-20282)PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File UploadApache Kafka UI /smartfilters/testexecutions 代码执行漏洞(CVE-2026-5562)WP User Manager /profile/admin/about 文件包含漏洞(CVE-2026-9290)SteVe /steve/manager/signin 默认口令漏洞PoCCVE-2008-2052: Bitrix Site Manager 6.5 - Open RedirectPoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File Inclusion