5 matches found
PT-2019-3517
Name of the Vulnerable Software and Affected Versions Cisco Small Business series 250, 350, 350X, 550X affected versions not specified Cisco FindIT Network Probe affected versions not specified Description The issue is related to a hardcoded X.509 certificate public/private key pair in the softwa...
CVE-2012-4072: Improper Input Validation
The KVM subsystem in Cisco Unified Computing System UCS relies on a hardcoded X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers, and read keyboard and mouse events, by leveraging knowledge of this certificate's private key, aka Bug ID CSCte90327...
PT-2013-1613
Name of the Vulnerable Software and Affected Versions Cisco Unified Computing System UCS affected versions not specified Description The issue concerns the KVM subsystem in Cisco Unified Computing System UCS, which relies on a hardcoded X.509 certificate. This allows man-in-the-middle attackers t...
PT-2013-5115
Name of the Vulnerable Software and Affected Versions Siemens Scalance W7xx devices with firmware prior to 4.5.4 Description The issue allows remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging a hardcoded X.509 certificate's trust relationship. This is becaus...
CVE-2013-4651: Undefined Security Weakness
Siemens Scalance W7xx devices with firmware before 4.5.4 use the same hardcoded X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship...