CVE-2014-3394

The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun10916.

Score

CVSS 2.0 5.0 Medium

Status

Modified - psirt@cisco.com

Published

2014-10-10

Last modified

2024-08-06

Weaknesses

CWE-295

Affected products

• Adaptive Security Appliance Software (Cisco)
• Adaptive Security Virtual Appliance (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa