NVD

Id
29559  
Name
CVE-2014-0675  
Description
The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers" installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate"s trust relationship, aka Bug ID CSCue07471.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-01-22  
Modified Date
2016-09-16  
Seq
2014-0675  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156616 29559 CVE-2014-0675 20140122 Cisco TelePresence Video Communication Server Expressway Default SSL Certificate Vulnerability  View
156617 29559 CVE-2014-0675 http://tools.cisco.com/security/center/viewAlert.x?alertId=32540  View
156618 29559 CVE-2014-0675 65101  View
156619 29559 CVE-2014-0675 1029682  View
156620 29559 CVE-2014-0675 cisco-telepresence-cve20140675-mitm(90650)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12358 JVNDB-2014-001233 Cisco TelePresence Video Communication Server の Expressway コンポーネントにおける中間者攻撃を実行される脆弱性 Cisco TelePresence Video Communication Server (VCS) CVE-2014-0675 68076 CVE-2014-0675 29559 6.4 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001233.html 2014-01-23 2014-01-24 View