CVE-2014-3394

MEDIUM · 5.0 CVSS Gepubliceerd: 10-10-2014 CWE-295

Beschrijving

The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun10916.

Vendors

Cisco

Affected products

Adaptive Security Virtual Appliance Adaptive Security Appliance Software Asa 1000v Cloud Firewall Asa 5505 Asa 5512-x Asa 5515-x Asa 5525-x Asa 5545-x Asa 5555-x Asa 5580 Asa 5585-x

References

tools.cisco.com