CVEvulnerability

CVE-2014-3394

5.0 MEDIUM Published 2014-10-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-10-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-295

Description

The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun10916.

Affected configurations

• cisco adaptive security virtual appliance • cisco adaptive security appliance software 8.2.0.45 • cisco adaptive security appliance software 8.2.1 • cisco adaptive security appliance software 8.2.1.1 • cisco adaptive security appliance software 8.2.2 • cisco adaptive security appliance software 8.2.2.10 • cisco adaptive security appliance software 8.2.2.12 • cisco adaptive security appliance software 8.2.2.16 • cisco adaptive security appliance software 8.2.2.17 • cisco adaptive security appliance software 8.2.3 • cisco adaptive security appliance software 8.2.4 • cisco adaptive security appliance software 8.2.4.1 • cisco adaptive security appliance software 8.2.4.4 • cisco adaptive security appliance software 8.2.5 • cisco adaptive security appliance software 8.2.5.13 • cisco adaptive security appliance software 8.2.5.22 • cisco adaptive security appliance software 8.2.5.26 • cisco adaptive security appliance software 8.2.5.33 • cisco adaptive security appliance software 8.2.5.40 • cisco adaptive security appliance software 8.2.5.41 • cisco adaptive security appliance software 8.2.5.46 • cisco adaptive security appliance software 8.2.5.48 • cisco adaptive security appliance software 8.4.1 • cisco adaptive security appliance software 8.4.1.3 • cisco adaptive security appliance software 8.4.1.11 • cisco adaptive security appliance software 8.4.2 • cisco adaptive security appliance software 8.4.2.1 • cisco adaptive security appliance software 8.4.2.8 • cisco adaptive security appliance software 8.4.3 • cisco adaptive security appliance software 8.4.3.8 • cisco adaptive security appliance software 8.4.3.9 • cisco adaptive security appliance software 8.4.4 • cisco adaptive security appliance software 8.4.4.1 • cisco adaptive security appliance software 8.4.4.3 • cisco adaptive security appliance software 8.4.4.5 • cisco adaptive security appliance software 8.4.4.9 • cisco adaptive security appliance software 8.4.5 • cisco adaptive security appliance software 8.4.5.6 • cisco adaptive security appliance software 8.4.6 • cisco adaptive security appliance software 8.4.7 • cisco adaptive security appliance software 8.4.7.3 • cisco adaptive security appliance software 8.6.1 • cisco adaptive security appliance software 8.6.1.1 • cisco adaptive security appliance software 8.6.1.2 • cisco adaptive security appliance software 8.6.1.5 • cisco adaptive security appliance software 8.6.1.10 • cisco adaptive security appliance software 8.6.1.12 • cisco adaptive security appliance software 8.6.1.13 • cisco adaptive security appliance software 8.7.1 • cisco adaptive security appliance software 8.7.1.3 • cisco adaptive security appliance software 8.7.1.4 • cisco adaptive security appliance software 8.7.1.7 • cisco adaptive security appliance software 8.7.1.11 • cisco adaptive security appliance software 9.0.1 • cisco adaptive security appliance software 9.0.2 • cisco adaptive security appliance software 9.0.2.10 • cisco adaptive security appliance software 9.0.3 • cisco adaptive security appliance software 9.0.3.6 • cisco adaptive security appliance software 9.0.3.8 • cisco adaptive security appliance software 9.0.4 … and 11 more

Related

Weakness · CWE (1)

  • CWE-295 Improper Certificate Validation weakness

References