Riskcovery

CVE-2019-1757

Cisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability

State
Published
Severity
Not scored
Published
Mar 28, 2019
Updated
Nov 15, 2024
Reserved
Dec 6, 2018

Read the record on cve.org

Description

A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid certificate. The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
Cisco IOS and IOS XE SoftwareCisco
  • 3.6.4EAffected
  • 3.6.5EAffected
  • 3.6.6EAffected
  • 3.6.5aEAffected
  • 3.6.5bEAffected
  • 3.6.7EAffected
  • 3.6.8EAffected
  • 3.6.7aEAffected
  • 3.6.7bEAffected
  • 3.7.4EAffected
  • 3.7.5EAffected
  • 3.16.1SAffected
  • 3.16.1aSAffected
  • 3.16.2SAffected
  • 3.16.2aSAffected
  • 3.16.3SAffected
  • 3.16.2bSAffected
  • 3.16.3aSAffected
  • 3.16.4SAffected
  • 3.16.4aSAffected
  • 3.16.4bSAffected
  • 3.16.4gSAffected
  • 3.16.5SAffected
  • 3.16.4cSAffected
  • 3.16.4dSAffected
  • and 84 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.