CVEvulnerability
CVE-2014-3394
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-10-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-295
Description
The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun10916.
Affected configurations
• cisco adaptive security virtual appliance
• cisco adaptive security appliance software 8.2.0.45
• cisco adaptive security appliance software 8.2.1
• cisco adaptive security appliance software 8.2.1.1
• cisco adaptive security appliance software 8.2.2
• cisco adaptive security appliance software 8.2.2.10
• cisco adaptive security appliance software 8.2.2.12
• cisco adaptive security appliance software 8.2.2.16
• cisco adaptive security appliance software 8.2.2.17
• cisco adaptive security appliance software 8.2.3
• cisco adaptive security appliance software 8.2.4
• cisco adaptive security appliance software 8.2.4.1
• cisco adaptive security appliance software 8.2.4.4
• cisco adaptive security appliance software 8.2.5
• cisco adaptive security appliance software 8.2.5.13
• cisco adaptive security appliance software 8.2.5.22
• cisco adaptive security appliance software 8.2.5.26
• cisco adaptive security appliance software 8.2.5.33
• cisco adaptive security appliance software 8.2.5.40
• cisco adaptive security appliance software 8.2.5.41
• cisco adaptive security appliance software 8.2.5.46
• cisco adaptive security appliance software 8.2.5.48
• cisco adaptive security appliance software 8.4.1
• cisco adaptive security appliance software 8.4.1.3
• cisco adaptive security appliance software 8.4.1.11
• cisco adaptive security appliance software 8.4.2
• cisco adaptive security appliance software 8.4.2.1
• cisco adaptive security appliance software 8.4.2.8
• cisco adaptive security appliance software 8.4.3
• cisco adaptive security appliance software 8.4.3.8
• cisco adaptive security appliance software 8.4.3.9
• cisco adaptive security appliance software 8.4.4
• cisco adaptive security appliance software 8.4.4.1
• cisco adaptive security appliance software 8.4.4.3
• cisco adaptive security appliance software 8.4.4.5
• cisco adaptive security appliance software 8.4.4.9
• cisco adaptive security appliance software 8.4.5
• cisco adaptive security appliance software 8.4.5.6
• cisco adaptive security appliance software 8.4.6
• cisco adaptive security appliance software 8.4.7
• cisco adaptive security appliance software 8.4.7.3
• cisco adaptive security appliance software 8.6.1
• cisco adaptive security appliance software 8.6.1.1
• cisco adaptive security appliance software 8.6.1.2
• cisco adaptive security appliance software 8.6.1.5
• cisco adaptive security appliance software 8.6.1.10
• cisco adaptive security appliance software 8.6.1.12
• cisco adaptive security appliance software 8.6.1.13
• cisco adaptive security appliance software 8.7.1
• cisco adaptive security appliance software 8.7.1.3
• cisco adaptive security appliance software 8.7.1.4
• cisco adaptive security appliance software 8.7.1.7
• cisco adaptive security appliance software 8.7.1.11
• cisco adaptive security appliance software 9.0.1
• cisco adaptive security appliance software 9.0.2
• cisco adaptive security appliance software 9.0.2.10
• cisco adaptive security appliance software 9.0.3
• cisco adaptive security appliance software 9.0.3.6
• cisco adaptive security appliance software 9.0.3.8
• cisco adaptive security appliance software 9.0.4
… and 11 more
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness