CVE-2014-0675

Description

The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://osvdb.org/102377
• http://secunia.com/advisories/56621
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32540
• http://www.securityfocus.com/bid/65101
• http://www.securitytracker.com/id/1029682
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90650
• http://osvdb.org/102377
• http://secunia.com/advisories/56621
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32540
• http://www.securityfocus.com/bid/65101
• http://www.securitytracker.com/id/1029682
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90650

CWEs

CWE-255

💬 Discuss CVE-2014-0675 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.