Cisco IOS and IOS XE Smart Reporting Service Certificate Validation Vulnerability

Cisco IOS Internet Operating System is a proprietary operating system that runs on most Cisco routers and switches.Cisco IOS XE is a modular operating system based on the Linux kernel. A certificate validation vulnerability exists in the Cisco Smart Call Home feature of Cisco IOS and IOS XE. The...

Cisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability

A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected...

PT-2019-1744 · Cisco · Cisco Ios +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS and IOS XE Software affected versions not specified Description: A vulnerability in the Cisco Smart Call Home feature could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invali...

How to Configure CEIP / Call Home for the Citrix License Server

Note: This feature is only available in the Citrix License Server 11.14.0.1 Build 19005 or later. Citrix Customer Experience Improvement Program CEIP is now enabled by default during License Server installation. Previously customers had to configure CEIP settings by editing CITRIX.opt or using...

CVE-2016-6359

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

CVE-2016-6359

Cross-site scripting XSS vulnerability in Cisco Transport Gateway Installation Software 4.14.0 on Smart Call Home Transport Gateway devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug IDs CSCva40650 and CSCva40817...

Cisco Smart Call Home Transport Gateway Cross-Site Scripting Vulnerability

Cisco Smart Call Home Transport Gateway is the United States Cisco Cisco company for intelligent messaging equipment in a message transport gateway products. A cross-site scripting vulnerability exists in the web framework of Cisco Smart Call Home Transport Gateway version 4.14.0 running on the...

Cisco Smart Call Home Transport Gateway Cross-Site Scripting Vulnerability

A vulnerability in the web framework of the Cisco Smart Call Home Transport Gateway could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to insufficient input validation of a user-supplied value. An attacker could exploit this...

The vulnerability of the Cisco Nexus 5000 software allows a malicious actor to trigger buffer overflows.

The buffer overflow in the implementation of the Smart Call Home function in Cisco NX-OS for Cisco Unified Computing System UCS switches and Nexus devices, as well as in Cisco CG-OS for Cisco Connected Grid series 1000 routers, allows remote SMTP servers to execute arbitrary code using specially...

SUSE SLED12 / SLES12 Security Update : MozillaFirefox / mozilla-nss (SUSE-SU-2014:1510-1)

update to Firefox 31.2.0 ESR bnc900941 - MFSA 2014-74/CVE-2014-1574/CVE-2014-1575 bmo1001994, bmo1011354, bmo1018916, bmo1020034, bmo1023035, bmo1032208, bmo1033020, bmo1034230, bmo1061214, bmo1061600, bmo1064346, bmo1072044, bmo1072174 Miscellaneous memory safety hazards rv:33.0/rv:31.2 - MFSA...

CVE-2014-9326

CVE-2014-9326 affects F5 BIG-IP products where the automatic update check (Phone Home) and ASM Call Home auto-signature update do not properly validate SSL server certificates, enabling MITM via crafted certificates. Affected: BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, Link Controller (versions 1...

F5 Networks BIG-IP : BIG-IP Automatic Update Check and ASM Automatic Signature Update man-in-the-middle vulnerability (K16090)

The automatic signature update functionality in the 1 Phone Home feature in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, GTM, and Link Controller 11.5.0 through 11.6.0, ASM 10.0.0 through 11.6.0, and PEM 11.3.0 through 11.6.0 and the 2 Call Home feature in ASM 10.0.0 through 11.6.0 and PEM 11.3.0...

Cisco ASA Smart Call Home Digital Certificate Validation Vulnerability (cisco-sa-20141008-asa)

A vulnerability in the Smart Call Home SCH feature of Cisco ASA Software could allow an unauthenticated, remote attacker to bypass digital certificate validation if any feature that uses digital certificates is configured on the affected system. Copyright C 2015 Greenbone Networks GmbH Some text...

CVE-2014-3394

The Smart Call Home SCH implementation in Cisco ASA Software 8.2 before 8.25.50, 8.4 before 8.47.15, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun109...

CVE-2014-3394

The Smart Call Home SCH implementation in Cisco ASA Software 8.2 before 8.25.50, 8.4 before 8.47.15, 8.6 before 8.61.14, 8.7 before 8.71.13, 9.0 before 9.04.8, and 9.1 before 9.15.1 allows remote attackers to bypass certificate validation via an arbitrary VeriSign certificate, aka Bug ID CSCun109...

CVE-2014-3394

The CVE-2014-3394 issue affects Cisco ASA Software’s Smart Call Home (SCH) feature, where a trustpoint (including VeriSign) installed when SCH is configured could allow remote attackers to bypass certificate validation. Affected versions include Cisco ASA Software 8.2 before 8.2(5.50), 8.4 before...

Cisco ASA Software Multiple Vulnerabilities (cisco-sa-20141008-asa)

The remote Cisco ASA device is affected by one or more of the following vulnerabilities : - A flaw exists in the SQLNET Inspection Engine due to improper handling of SQL REDIRECT packets. An attacker can exploit this vulnerability by sending a crafted sequence of REDIRECT packets through the...

Cisco ASA Smart Call Home Digital Certificate Validation Vulnerability

A vulnerability in the Smart Call Home SCH feature of Cisco ASA Software could allow an unauthenticated, remote attacker to bypass digital certificate validation if any feature that uses digital certificates is configured on the affected system. The vulnerability exists because when SCH is...

Multiple Vulnerabilities in Cisco ASA Software

2015-July-08 UPDATE: Cisco PSIRT is aware of disruption to some Cisco customers with Cisco ASA devices affected by CVE-2014-3383, the Cisco ASA VPN Denial of Service Vulnerability that was disclosed in this Security Advisory. Traffic causing the disruption was isolated to a specific source IPv4...