CVEvulnerability
CVE-2014-0675
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-255
Description
The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.
Affected configurations
• cisco telepresence video communication server
Related
Weakness · not in database (1)
References
- http://osvdb.org/102377 osvdb.org
- http://secunia.com/advisories/56621 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32540 Vendor Advisory
- http://www.securityfocus.com/bid/65101 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029682 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90650 exchange.xforce.ibmcloud.com
- http://osvdb.org/102377 osvdb.org
- http://secunia.com/advisories/56621 secunia.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32540 Vendor Advisory
- http://www.securityfocus.com/bid/65101 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029682 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/90650 exchange.xforce.ibmcloud.com