3 matches found
SSL / TLS Certificate Known Hard Coded Private Keys
The remote host is running a service that is using a publicly known SSL / TLS private key. An attacker may use this key to decrypt intercepted traffic between users and the device. A remote attacker can also perform a man-in-the-middle attack in order to gain access to the system or modify data i...
CVE-2015-6358
Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another...
CVE-2015-6358
CVE-2015-6358 is associated with Cisco devices that ship with hardcoded X.509 certificates and SSH host keys embedded in firmware, enabling remote attackers to defeat cryptographic protections and perform man-in-the-middle attacks by using keys from another installation. Connected OpenVAS data re...