CVE-2020-3158

CVE-2020-3158 is a critical vulnerability in the High Availability service of Cisco Smart Software Manager On-Prem, stemming from a default, static password for a system account. An unauthenticated, remote attacker can exploit this to gain read and write access to system data and configuration. With a CVSS score of 9.1 (CRITICAL), it presents a high risk due to its network-based attack vector and low attack complexity, allowing significant data compromise without full administrative control. While not listed in CISA's KEV catalog, there is no public exploit code available, though it has garnered notable community discussion and media coverage.