Improper authentication controls in Cisco License On‑Prem allow an attacker to bypass expected authentication checks. The flaw is a classic CWE‑306 weakness and, once exploited, enables unauthorized access to privileged functions or license management data, compromising both confidentiality and integrity. The assigned CVSS score of 9.8 highlights the critical nature of this vulnerability.

Cisco License On‑Prem, formerly Cisco Smart Software Manager On‑Prem. No specific version numbers are enumerated; the hardening release addresses multiple internally discovered vulnerabilities within this product.

The CVSS rating of 9.8 signals a high severity. EPSS data is not available and the flaw is not listed in the CISA KEV catalog. The most likely attack vector is remote authentication bypass – an adversary simply needs network reach to the License On‑Prem service. Successful exploitation would grant the attacker elevated privileges or complete control over license management functions.