2 matches found
CVE-2015-6358: Improper Certificate Validation
Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another...
5.9CVSS6.6AI score0.01305EPSS
SaveExploits0References2
PT-2017-7005
Name of the Vulnerable Software and Affected Versions Cisco embedded devices affected versions not specified Description The issue allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of hardcoded X.509 certificates an...
5.9CVSS0.01305EPSS
SaveExploits0References8
20