CVE-2014-0675 in Cisco TelePresence Video Communication Server

摘要 (英语)

The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate s trust relationship, aka Bug ID CSCue07471.

预定

2014-01-02

披露

2014-01-22

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
12056	Cisco TelePresence Video Communication Server SSL Certificate 权限提升	255	概念验证	官方修复	CVE-2014-0675