CVE-2014-3394

Published: Oct 10, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Smart Call Home (SCH) implementation in Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before 8.4(7.15), 8.6 before 8.6(1.14), 8.7 before 8.7(1.13), 9.0 before 9.0(4.8), and 9.1 before 9.1(5.1) allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun10916.

Affected (71)

Products: Cisco: Adaptive Security Appliance Software, Adaptive Security Virtual Appliance

Cisco

2 products

Adaptive Security Appliance Software

Adaptive Security Virtual Appliance

Configuration A

71 vulnerable · 9 platform

Vulnerable Software	Affected Versions
Cisco Adaptive Security Appliance Software	Version 8.2.0.45
Cisco Adaptive Security Appliance Software	Version 8.2.1.1
Cisco Adaptive Security Appliance Software	Version 8.2.1
Cisco Adaptive Security Appliance Software	Version 8.2.2.10
Cisco Adaptive Security Appliance Software	Version 8.2.2.12
Cisco Adaptive Security Appliance Software	Version 8.2.2.16
Cisco Adaptive Security Appliance Software	Version 8.2.2.17
Cisco Adaptive Security Appliance Software	Version 8.2.2
Cisco Adaptive Security Appliance Software	Version 8.2.3
Cisco Adaptive Security Appliance Software	Version 8.2.4.1
Cisco Adaptive Security Appliance Software	Version 8.2.4.4
Cisco Adaptive Security Appliance Software	Version 8.2.4
Cisco Adaptive Security Appliance Software	Version 8.2.5.13
Cisco Adaptive Security Appliance Software	Version 8.2.5.22
Cisco Adaptive Security Appliance Software	Version 8.2.5.26
Cisco Adaptive Security Appliance Software	Version 8.2.5.33
Cisco Adaptive Security Appliance Software	Version 8.2.5.40
Cisco Adaptive Security Appliance Software	Version 8.2.5.41
Cisco Adaptive Security Appliance Software	Version 8.2.5.46
Cisco Adaptive Security Appliance Software	Version 8.2.5.48
Cisco Adaptive Security Appliance Software	Version 8.2.5
Cisco Adaptive Security Appliance Software	Version 8.4.1.11
Cisco Adaptive Security Appliance Software	Version 8.4.1.3
Cisco Adaptive Security Appliance Software	Version 8.4.1
Cisco Adaptive Security Appliance Software	Version 8.4.2.1
Cisco Adaptive Security Appliance Software	Version 8.4.2.8
Cisco Adaptive Security Appliance Software	Version 8.4.2
Cisco Adaptive Security Appliance Software	Version 8.4.3.8
Cisco Adaptive Security Appliance Software	Version 8.4.3.9
Cisco Adaptive Security Appliance Software	Version 8.4.3
Cisco Adaptive Security Appliance Software	Version 8.4.4.1
Cisco Adaptive Security Appliance Software	Version 8.4.4.3
Cisco Adaptive Security Appliance Software	Version 8.4.4.5
Cisco Adaptive Security Appliance Software	Version 8.4.4.9
Cisco Adaptive Security Appliance Software	Version 8.4.4
Cisco Adaptive Security Appliance Software	Version 8.4.5.6
Cisco Adaptive Security Appliance Software	Version 8.4.5
Cisco Adaptive Security Appliance Software	Version 8.4.6
Cisco Adaptive Security Appliance Software	Version 8.4.7.3
Cisco Adaptive Security Appliance Software	Version 8.4.7
Cisco Adaptive Security Appliance Software	Version 8.6.1.10
Cisco Adaptive Security Appliance Software	Version 8.6.1.12
Cisco Adaptive Security Appliance Software	Version 8.6.1.13
Cisco Adaptive Security Appliance Software	Version 8.6.1.1
Cisco Adaptive Security Appliance Software	Version 8.6.1.2
Cisco Adaptive Security Appliance Software	Version 8.6.1.5
Cisco Adaptive Security Appliance Software	Version 8.6.1
Cisco Adaptive Security Appliance Software	Version 8.7.1.11
Cisco Adaptive Security Appliance Software	Version 8.7.1.3
Cisco Adaptive Security Appliance Software	Version 8.7.1.4
Cisco Adaptive Security Appliance Software	Version 8.7.1.7
Cisco Adaptive Security Appliance Software	Version 8.7.1
Cisco Adaptive Security Appliance Software	Version 9.0.1
Cisco Adaptive Security Appliance Software	Version 9.0.2.10
Cisco Adaptive Security Appliance Software	Version 9.0.2
Cisco Adaptive Security Appliance Software	Version 9.0.3.6
Cisco Adaptive Security Appliance Software	Version 9.0.3.8
Cisco Adaptive Security Appliance Software	Version 9.0.3
Cisco Adaptive Security Appliance Software	Version 9.0.4.1
Cisco Adaptive Security Appliance Software	Version 9.0.4.5
Cisco Adaptive Security Appliance Software	Version 9.0.4.7
Cisco Adaptive Security Appliance Software	Version 9.0.4
Cisco Adaptive Security Appliance Software	Version 9.1.1.4
Cisco Adaptive Security Appliance Software	Version 9.1.1
Cisco Adaptive Security Appliance Software	Version 9.1.2.8
Cisco Adaptive Security Appliance Software	Version 9.1.2
Cisco Adaptive Security Appliance Software	Version 9.1.3.2
Cisco Adaptive Security Appliance Software	Version 9.1.3
Cisco Adaptive Security Appliance Software	Version 9.1.4
Cisco Adaptive Security Appliance Software	Version 9.1.5
Cisco Adaptive Security Virtual Appliance	All versions

Running on/with	Platform Versions
Cisco Asa 1000v Cloud Firewall	All versions
Cisco Asa 5505	All versions
Cisco Asa 5512 X	All versions
Cisco Asa 5515 X	All versions
Cisco Asa 5525 X	All versions
Cisco Asa 5545 X	All versions
Cisco Asa 5555 X	All versions
Cisco Asa 5580	All versions
Cisco Asa 5585 X	All versions

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141008-asa

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.