6.4

CVE-2014-0675

EPSS 0.45%
Published 23.01.2014 04:41:16
Last modified 11.04.2025 00:51:21
Source psirt@cisco.com
Teams watchlist Login
Open Login

The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.

Affected products Warnungen 0 Metrics 2 CWE 0 References 10

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Telepresence Video Communication Server Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.45%	0.607

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.4	10	4.9	AV:N/AC:L/Au:N/C:P/I:P/A:N

http://osvdb.org/102377

http://secunia.com/advisories/56621

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675

Vendor Advisory

http://tools.cisco.com/security/center/viewAlert.x?alertId=32540

Vendor Advisory

http://www.securityfocus.com/bid/65101

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1029682

Third Party Advisory

VDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/90650

https://nvd.nist.gov/vuln/detail/CVE-2014-0675

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-0675

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-0675

EUVD