CVE-2014-0675

The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.

• CWE-255

• http://osvdb.org/102377
• http://secunia.com/advisories/56621
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32540Vendor Advisory
• http://www.securityfocus.com/bid/65101Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029682Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90650
• http://osvdb.org/102377
• http://secunia.com/advisories/56621
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0675Vendor Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=32540Vendor Advisory
• http://www.securityfocus.com/bid/65101Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1029682Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90650

Published

Jan 23, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-0669The Wireless Session Protocol (WSP) feature in the Gateway G…
• CVE-2014-0670Cross-site scripting (XSS) vulnerability in the Search and P…
• CVE-2014-0671Open redirect vulnerability in Cisco MediaSense allows remot…
• CVE-2014-0672The Search and Play interface in Cisco MediaSense does not p…
• CVE-2014-0673Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2014-0674Cisco Video Surveillance Operations Manager (VSOM) does not …
• CVE-2014-0676Cisco NX-OS allows local users to bypass intended TACACS+ co…
• CVE-2014-0677The Label Distribution Protocol (LDP) functionality in Cisco…
• CVE-2014-0678The portal interface in Cisco Secure Access Control System (…
• CVE-2014-0679Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.…
• CVE-2014-0680Cross-site scripting (XSS) vulnerability in the HTTP control…
• CVE-2014-0681Cross-site scripting (XSS) vulnerability in Cisco Identity S…