Cisco Patches Critical Vulnerabilities in Smart Licensing Utility

September 5, 2024 at 08:55AM Cisco announced patches for multiple vulnerabilities, including two critical flaws in Smart Licensing Utility and a medium-severity Identity Services Engine flaw, with existing proof-of-concept code. The Smart Licensing bugs could allow remote unauthenticated access or logins, and Cisco advises migrating to version 2.3.0. Additionally, patches were announced for other high … Read more

Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

September 5, 2024 at 12:58AM Cisco has issued security updates to address critical flaws in its Smart Licensing Utility and Identity Services Engine (ISE). Affecting versions 2.0.0, 2.1.0, and 2.2.0, the flaws could enable unauthenticated, remote attackers to elevate privileges or access sensitive information. Additionally, a command injection vulnerability in ISE versions 3.2 and 3.3 … Read more