[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUkP7mFOozwHlQlcPi9ks3-mpI76KXiYgEb0DOVO4CeA":3,"g5a-risk:CVE-2024-20440":116},{"success":4,"data":5,"meta":113},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":48,"references":49,"referencesCount":55,"weaknesses":56,"weaknessesCount":55,"isActivelyExploited":65,"cisaInfo":26,"otxData":26,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":104,"notableEvents":105},"CVE-2024-20440","What is CVE-2024-20440?","A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information.\r\n\r\nThis vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API.","A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due t...","2024-09-04T17:15:13.517","2024-09-19T13:42:41.017",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"ykramarz@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.51466,[33,33,33,33,33,33,33],"High",[37,42,45],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"cisco","smart_license_utility","2.0.0","cpe:2.3:a:cisco:smart_license_utility:2.0.0:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"2.1.0","cpe:2.3:a:cisco:smart_license_utility:2.1.0:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"2.2.0","cpe:2.3:a:cisco:smart_license_utility:2.2.0:*:*:*:*:*:*:*",3,[50],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-cslu-7gHMzWmw","Cisco",[54],"Vendor Advisory",1,[57],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-532","Insertion of Sensitive Information into Log File","Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.","While logging all information may be helpful during development stages, it is important that logging levels be set appropriately before a product ships so that sensitive user data and system information are not accidentally exposed to potential attackers.\nDifferent log files may be produced and stored for:","Incomplete","Base","Simple",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2024-20440? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-20440, a high severity cyber security vulnerability from 2024. High exploit probability (51.5%). A vulnerability in Cisco ...","CVE-2024-20440, CVE-2024-20440 vulnerability, CVE-2024-20440 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, cisco security, smart_license_utility vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-20440",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-20440","Cybersecurity","CVE-2024-20440, CVE-2024-20440 vulnerability, CVE-2024-20440 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":26,"Negate":26,"Nodes":94},[95],{"Operator":96,"Negate":26,"CPEMatch":97},"OR",[98,100,102],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":99,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AF65619C-5372-4141-9919-3A7E13D8D557",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":101,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F0FAD450-9306-4ECB-BC8B-7CE19CCC4353",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":103,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"46259FBD-210E-4DD4-866A-A0F4FF485BC2",[],[106],{"id":107,"eventType":108,"eventTime":109,"details":110,"label":111,"color":112},"4d0f1d76-8b9a-4028-85bd-8567361ae50f","LOW_EPSS_DELTA","2026-06-16T04:04:49.689984+00:00","Daily EPSS score decreased by 0.269 on 2024-09-06","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":114,"version":115},1793212751464,"2.0",{"score":117,"band":35,"action":118,"scoredAt":119},81,"Emergency patch","2026-07-01T10:33:55.999078+00:00"]