CVE-2014-3394 The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allo...
MediumCVSS 5.0
EPSS 1.00%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun10916.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco adaptive security virtual appliance | All versions | No fix listed |
| cisco adaptive security appliance software | = 8.2.0.45 | No fix listed |
| cisco adaptive security appliance software | = 8.2.1 | No fix listed |
| cisco adaptive security appliance software | = 8.2.1.1 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.10 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.12 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.16 | No fix listed |
| cisco adaptive security appliance software | = 8.2.2.17 | No fix listed |
| cisco adaptive security appliance software | = 8.2.3 | No fix listed |
| cisco adaptive security appliance software | = 8.2.4 | No fix listed |
| cisco adaptive security appliance software | = 8.2.4.1 | No fix listed |
| cisco adaptive security appliance software | = 8.2.4.4 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.13 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.22 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.26 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.33 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.40 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.41 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.46 | No fix listed |
| cisco adaptive security appliance software | = 8.2.5.48 | No fix listed |
| cisco adaptive security appliance software | = 8.4.1 | No fix listed |
| cisco adaptive security appliance software | = 8.4.1.3 | No fix listed |
| cisco adaptive security appliance software | = 8.4.1.11 | No fix listed |
Show 46 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco adaptive security appliance software | = 8.4.2 | No fix listed |
| cisco adaptive security appliance software | = 8.4.2.1 | No fix listed |
| cisco adaptive security appliance software | = 8.4.2.8 | No fix listed |
| cisco adaptive security appliance software | = 8.4.3 | No fix listed |
| cisco adaptive security appliance software | = 8.4.3.8 | No fix listed |
| cisco adaptive security appliance software | = 8.4.3.9 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4.1 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4.3 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4.5 | No fix listed |
| cisco adaptive security appliance software | = 8.4.4.9 | No fix listed |
| cisco adaptive security appliance software | = 8.4.5 | No fix listed |
| cisco adaptive security appliance software | = 8.4.5.6 | No fix listed |
| cisco adaptive security appliance software | = 8.4.6 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7 | No fix listed |
| cisco adaptive security appliance software | = 8.4.7.3 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.1 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.2 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.5 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.10 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.12 | No fix listed |
| cisco adaptive security appliance software | = 8.6.1.13 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.3 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.4 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.7 | No fix listed |
| cisco adaptive security appliance software | = 8.7.1.11 | No fix listed |
| cisco adaptive security appliance software | = 9.0.1 | No fix listed |
| cisco adaptive security appliance software | = 9.0.2 | No fix listed |
| cisco adaptive security appliance software | = 9.0.2.10 | No fix listed |
| cisco adaptive security appliance software | = 9.0.3 | No fix listed |
| cisco adaptive security appliance software | = 9.0.3.6 | No fix listed |
| cisco adaptive security appliance software | = 9.0.3.8 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.1 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.5 | No fix listed |
| cisco adaptive security appliance software | = 9.0.4.7 | No fix listed |
| cisco adaptive security appliance software | = 9.1.1 | No fix listed |
| cisco adaptive security appliance software | = 9.1.1.4 | No fix listed |
| cisco adaptive security appliance software | = 9.1.2 | No fix listed |
| cisco adaptive security appliance software | = 9.1.2.8 | No fix listed |
| cisco adaptive security appliance software | = 9.1.3 | No fix listed |
| cisco adaptive security appliance software | = 9.1.3.2 | No fix listed |
| cisco adaptive security appliance software | = 9.1.4 | No fix listed |
| cisco adaptive security appliance software | = 9.1.5 | No fix listed |
References
- 20141008 Multiple Vulnerabilities in Cisco ASA Software vendor-advisory