[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkQPPG-e9pkaexHh0VDxcA6dxdY16jv7DS50LThCioZg":3,"g5a-risk:CVE-2024-20439":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":36,"epssPercentile":27,"epssTimeSeries":37,"severity":38,"affectedProducts":39,"affectedProductsCount":45,"references":46,"referencesCount":57,"weaknesses":58,"weaknessesCount":57,"isActivelyExploited":4,"cisaInfo":74,"otxData":27,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":113,"notableEvents":114},"CVE-2024-20439","What is CVE-2024-20439?","A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static administrative credential.\r\n\r This vulnerability is due to an undocumented static user credential for an administrative account. An attacker could exploit this vulnerability by using the static credentials to login to the affected system. A successful exploit could allow the attacker to login to the affected system with administrative rights over the CSLU application API.","A vulnerability in Cisco Smart Licensing Utility (CSLU) could allow an unauthenticated, remote attacker to log into an affected system by using a static admi...","2024-09-04T17:15:13.21","2025-10-28T13:59:14.24",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"psirt@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[],0.9201,[36,36,36,36,36,36,36],"Critical",[40],{"vendor":41,"product":42,"version":43,"criteria":44,"vulnerable":4},"cisco","smart_license_utility","*","cpe:2.3:a:cisco:smart_license_utility:*:*:*:*:*:*:*:*",1,[47,52],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-cslu-7gHMzWmw","Cisco",[51],"Vendor Advisory",{"url":53,"source":54,"tags":55},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2024-20439","CISA",[56],"US Government Resource",2,[59,67],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:","Draft","Base","Simple",{"id":68,"name":69,"description":70,"extendedDescription":71,"status":72,"abstraction":73,"structure":66},"CWE-912","Hidden Functionality","The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.","Hidden functionality can take many forms, such as intentionally malicious code, \"Easter Eggs\" that contain extraneous functionality such as games, developer-friendly shortcuts that reduce maintenance or support costs such as hard-coded accounts, etc. From a security perspective, even when the functionality is not intentionally malicious or damaging, it can increase the product's attack surface and expose additional weaknesses beyond what is already exposed by the intended functionality. Even if it is not easily accessible, the hidden functionality could be useful for attacks that modify the control flow of the application.","Incomplete","Class",{"shortDescription":75,"requiredAction":75,"vulnerabilityName":75,"dateAdded":27},"",[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2024-20439? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-20439, a critical severity cyber security vulnerability from 2024. High exploit probability (92.0%). A vulnerability in Ci...","CVE-2024-20439, CVE-2024-20439 vulnerability, CVE-2024-20439 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, cisco security, smart_license_utility vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-20439",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-20439","Cybersecurity","CVE-2024-20439, CVE-2024-20439 vulnerability, CVE-2024-20439 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":27,"Negate":27,"Nodes":104},[105],{"Operator":106,"Negate":107,"CPEMatch":108},"OR",false,[109],{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":110,"VersionStartExcluding":27,"VersionStartIncluding":111,"VersionEndExcluding":112,"VersionEndIncluding":27},"CDFA4BEC-53FD-4A9C-9C78-4663F1B7528E","2.0.0","2.3.0",[],[],{"lastModified":11,"cacheTime":116,"version":117},1793200726165,"2.0",{"score":119,"band":38,"action":120,"scoredAt":121},90,"Emergency patch","2026-07-01T10:33:55.998946+00:00"]