CVE-2020-3443

A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could exploit this vulnerability by logging in with the System Operator role, performing a series of actions, and then assuming a new higher privileged role. A successful exploit could allow the attacker to perform all actions associated with the privilege of the assumed role. If that role is an administrative role, the attacker would gain full access to the device.

• CWE-264
• CWE-862

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smart-priv-esca-nqwxXWBuVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smart-priv-esca-nqwxXWBuVendor Advisory

Published

Aug 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3436A vulnerability in the web services interface of Cisco Adapt…8.6
• CVE-2020-3437A vulnerability in the web-based management interface of Cis…6.5
• CVE-2020-3439A vulnerability in the web-based management interface of Cis…4.8
• CVE-2020-3440A vulnerability in Cisco Webex Meetings Desktop App for Wind…6.5
• CVE-2020-3441A vulnerability in Cisco Webex Meetings and Cisco Webex Meet…5.3
• CVE-2020-3442The DuoConnect client enables users to establish SSH connect…5.7
• CVE-2020-3444A vulnerability in the packet filtering features of Cisco SD…7.5
• CVE-2020-3446A vulnerability in Cisco Virtual Wide Area Application Servi…9.8
• CVE-2020-3447A vulnerability in the CLI of Cisco AsyncOS for Cisco Email …6.5
• CVE-2020-3448A vulnerability in an access control mechanism of Cisco Cybe…5.8
• CVE-2020-3449A vulnerability in the Border Gateway Protocol (BGP) additio…4.3
• CVE-2020-3450A vulnerability in the web-based management interface of Cis…4.9