CVE-2014-0675

N/A Unknown
Published: January 23, 2014 Modified: April 29, 2026
View on NVD

Description

The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://osvdb.org/102377
Source: psirt@cisco.com
http://www.securityfocus.com/bid/65101
Source: psirt@cisco.com
Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029682
Source: psirt@cisco.com
Third Party Advisory VDB Entry
http://osvdb.org/102377
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/56621
Source: af854a3a-2127-422b-91ae-364da2661108
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=32540
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.securityfocus.com/bid/65101
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1029682
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/90650
Source: af854a3a-2127-422b-91ae-364da2661108

14 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.4%
64th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

cisco