A flaw in the web interface of Cisco Smart Software Manager On‑Prem lets an authenticated remote attacker send a crafted request that causes the system to disclose session credentials. With those credentials the attacker can raise their privileges from a standard System User to full administrative rights, enabling complete control of the host and all managed devices.

The vulnerability is present in Cisco Smart Software Manager On‑Prem. All installations of this product that have not applied the vendor’s security update are affected. Specific version ranges are not listed in the advisory, so any exposed instance remains vulnerable until patched.

The CVSS base score of 7.3 classifies this as high severity. Exploitability requires a valid user account with at least System User rights, which are typically granted to monitored users. The attack vector is remote over the web interface, and the vulnerability is not currently listed in CISA’s KEV catalog, indicating no documented large‑scale exploitation yet. Nevertheless, the ability to gain administrative rights warrants prompt action.