Lucene search
CiscoCISCO-SA-20190327-CALL-HOME-CERTHistoryMar 27, 2019 - 4:00 p.m.
Cisco IOS and IOS XE Software Smart Call Home Certificate Validation Vulnerability
2019-03-2716:00:00
tools.cisco.com
36
0.001 Low
EPSS
Percentile
48.7%
A vulnerability in the Cisco Smart Call Home feature of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data using an invalid certificate.
The vulnerability is due to insufficient certificate validation by the affected software. An attacker could exploit this vulnerability by supplying a crafted certificate to an affected device. A successful exploit could allow the attacker to conduct man-in-the-middle attacks to decrypt confidential information on user connections to the affected software.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-call-home-cert [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-call-home-cert”]
Affected configurations
Node
ciscoiosMatch15.2e
ORciscoiosMatch15.2ex
ORciscoiosMatch15.5s
ORciscoiosMatch15.2ea
ORciscoiosMatch15.6s
ORciscoiosMatch15.6t
ORciscoiosMatch15.6sp
ORciscoiosMatch15.6sn
ORciscoiosMatch15.3jd
ORciscoiosMatch15.6m
ORciscoiosMatch15.3jda
ORciscoiosMatch15.7m
ORciscoiosMatch12.2i
ORciscocisco_iosMatch3.6exe
ORciscocisco_iosMatch3.7exe
ORciscocisco_iosMatch3.16sxe
ORciscocisco_iosMatch3.17sxe
ORciscocisco_iosMatch16.2xe
ORciscocisco_iosMatch3.8exe
ORciscocisco_iosMatch16.3xe
ORciscocisco_iosMatch16.4xe
ORciscocisco_iosMatch16.5xe
ORciscocisco_iosMatch3.18sxe
ORciscocisco_iosMatch3.18spxe
ORciscocisco_iosMatch3.9exe
ORciscocisco_iosMatch16.6xe
ORciscocisco_iosMatch16.7xe
ORciscocisco_iosMatch16.8xe
ORciscocisco_iosMatch16.9xe
ORciscocisco_iosMatch3.10exe
ORciscoiosMatch15.2\(2\)e4
ORciscoiosMatch15.2\(2\)e5
ORciscoiosMatch15.2\(4\)e2
ORciscoiosMatch15.2\(3\)e4
ORciscoiosMatch15.2\(5\)e
ORciscoiosMatch15.2\(4\)e3
ORciscoiosMatch15.2\(2\)e6
ORciscoiosMatch15.2\(5a\)e
ORciscoiosMatch15.2\(5\)e1
ORciscoiosMatch15.2\(5b\)e
ORciscoiosMatch15.2\(4m\)e3
ORciscoiosMatch15.2\(2\)e5a
ORciscoiosMatch15.2\(5c\)e
ORciscoiosMatch15.2\(3\)e5
ORciscoiosMatch15.2\(2\)e5b
ORciscoiosMatch15.2\(4n\)e2
ORciscoiosMatch15.2\(4o\)e2
ORciscoiosMatch15.2\(5a\)e1
ORciscoiosMatch15.2\(4\)e4
ORciscoiosMatch15.2\(2\)e7
ORciscoiosMatch15.2\(5\)e2
ORciscoiosMatch15.2\(4p\)e1
ORciscoiosMatch15.2\(6\)e
ORciscoiosMatch15.2\(5\)e2b
ORciscoiosMatch15.2\(4\)e5
ORciscoiosMatch15.2\(5\)e2c
ORciscoiosMatch15.2\(2\)e8
ORciscoiosMatch15.2\(4m\)e2
ORciscoiosMatch15.2\(4o\)e3
ORciscoiosMatch15.2\(4q\)e1
ORciscoiosMatch15.2\(6\)e0a
ORciscoiosMatch15.2\(6\)e1
ORciscoiosMatch15.2\(2\)e7b
ORciscoiosMatch15.2\(4\)e5a
ORciscoiosMatch15.2\(6\)e0c
ORciscoiosMatch15.2\(4\)e6
ORciscoiosMatch15.2\(6\)e1a
ORciscoiosMatch15.2\(6\)e1s
ORciscoiosMatch15.2\(4s\)e1
ORciscoiosMatch15.2\(4s\)e2
ORciscoiosMatch15.2\(5\)ex
ORciscoiosMatch15.5\(3\)s1
ORciscoiosMatch15.5\(3\)s1a
ORciscoiosMatch15.5\(3\)s2
ORciscoiosMatch15.5\(3\)s3
ORciscoiosMatch15.5\(3\)s4
ORciscoiosMatch15.5\(3\)s5
ORciscoiosMatch15.5\(3\)s6
ORciscoiosMatch15.5\(3\)s6a
ORciscoiosMatch15.5\(3\)s7
ORciscoiosMatch15.5\(3\)s6b
ORciscoiosMatch15.2\(5\)ea
ORciscoiosMatch15.2\(4\)ea8
ORciscoiosMatch15.6\(1\)s
ORciscoiosMatch15.6\(2\)s
ORciscoiosMatch15.6\(2\)s1
ORciscoiosMatch15.6\(1\)s1
ORciscoiosMatch15.6\(1\)s2
ORciscoiosMatch15.6\(2\)s2
ORciscoiosMatch15.6\(1\)s3
ORciscoiosMatch15.6\(2\)s3
ORciscoiosMatch15.6\(1\)s4
ORciscoiosMatch15.6\(2\)s4
ORciscoiosMatch15.6\(1\)t
ORciscoiosMatch15.6\(2\)t
ORciscoiosMatch15.6\(1\)t0a
ORciscoiosMatch15.6\(1\)t1
ORciscoiosMatch15.6\(2\)t1
ORciscoiosMatch15.6\(1\)t2
ORciscoiosMatch15.6\(2\)t0a
ORciscoiosMatch15.6\(2\)t2
ORciscoiosMatch15.6\(1\)t3
ORciscoiosMatch15.6\(2\)t3
ORciscoiosMatch15.6\(2\)sp
ORciscoiosMatch15.6\(2\)sp1
ORciscoiosMatch15.6\(2\)sp2
ORciscoiosMatch15.6\(2\)sp3
ORciscoiosMatch15.6\(2\)sp4
ORciscoiosMatch15.6\(1\)sn
ORciscoiosMatch15.6\(1\)sn1
ORciscoiosMatch15.6\(2\)sn
ORciscoiosMatch15.6\(1\)sn2
ORciscoiosMatch15.6\(1\)sn3
ORciscoiosMatch15.6\(3\)sn
ORciscoiosMatch15.6\(4\)sn
ORciscoiosMatch15.6\(5\)sn
ORciscoiosMatch15.6\(6\)sn
ORciscoiosMatch15.6\(7\)sn
ORciscoiosMatch15.6\(7\)sn1
ORciscoiosMatch15.6\(7\)sn2
ORciscoiosMatch15.6\(7\)sn3
ORciscoiosMatch15.3\(3\)jd15
ORciscoiosMatch15.6\(3\)m
ORciscoiosMatch15.6\(3\)m1
ORciscoiosMatch15.6\(3\)m0a
ORciscoiosMatch15.6\(3\)m1a
ORciscoiosMatch15.6\(3\)m1b
ORciscoiosMatch15.6\(3\)m2
ORciscoiosMatch15.6\(3\)m2a
ORciscoiosMatch15.6\(3\)m3
ORciscoiosMatch15.6\(3\)m3a
ORciscoiosMatch15.6\(3\)m4
ORciscoiosMatch15.3\(3\)jda15
ORciscoiosMatch15.7\(3\)m
ORciscoiosMatch15.7\(3\)m1
ORciscoiosMatch15.7\(3\)m0a
ORciscoiosMatch15.7\(3\)m2
ORciscoiosMatch12.2\(6\)i1
ORciscocisco_iosMatch3.6.4exe
ORciscocisco_iosMatch3.6.5exe
ORciscocisco_iosMatch3.6.6exe
ORciscocisco_iosMatch3.6.5aexe
ORciscocisco_iosMatch3.6.5bexe
ORciscocisco_iosMatch3.6.7exe
ORciscocisco_iosMatch3.6.8exe
ORciscocisco_iosMatch3.6.7aexe
ORciscocisco_iosMatch3.6.7bexe
ORciscocisco_iosMatch3.7.4exe
ORciscocisco_iosMatch3.7.5exe
ORciscocisco_iosMatch3.16.1sxe
ORciscocisco_iosMatch3.16.1asxe
ORciscocisco_iosMatch3.16.2sxe
ORciscocisco_iosMatch3.16.2asxe
ORciscocisco_iosMatch3.16.3sxe
ORciscocisco_iosMatch3.16.2bsxe
ORciscocisco_iosMatch3.16.3asxe
ORciscocisco_iosMatch3.16.4sxe
ORciscocisco_iosMatch3.16.4asxe
ORciscocisco_iosMatch3.16.4bsxe
ORciscocisco_iosMatch3.16.4gsxe
ORciscocisco_iosMatch3.16.5sxe
ORciscocisco_iosMatch3.16.4csxe
ORciscocisco_iosMatch3.16.4dsxe
ORciscocisco_iosMatch3.16.4esxe
ORciscocisco_iosMatch3.16.6sxe
ORciscocisco_iosMatch3.16.5asxe
ORciscocisco_iosMatch3.16.5bsxe
ORciscocisco_iosMatch3.16.7sxe
ORciscocisco_iosMatch3.16.6bsxe
ORciscocisco_iosMatch3.16.7asxe
ORciscocisco_iosMatch3.16.7bsxe
ORciscocisco_iosMatch3.17.0sxe
ORciscocisco_iosMatch3.17.1sxe
ORciscocisco_iosMatch3.17.2sxe
ORciscocisco_iosMatch3.17.1asxe
ORciscocisco_iosMatch3.17.3sxe
ORciscocisco_iosMatch3.17.4sxe
ORciscocisco_iosMatch16.2.1xe
ORciscocisco_iosMatch16.2.2xe
ORciscocisco_iosMatch3.8.2exe
ORciscocisco_iosMatch3.8.3exe
ORciscocisco_iosMatch3.8.4exe
ORciscocisco_iosMatch3.8.5exe
ORciscocisco_iosMatch3.8.5aexe
ORciscocisco_iosMatch3.8.6exe
ORciscocisco_iosMatch16.3.1xe
ORciscocisco_iosMatch16.3.2xe
ORciscocisco_iosMatch16.3.3xe
ORciscocisco_iosMatch16.3.1axe
ORciscocisco_iosMatch16.3.4xe
ORciscocisco_iosMatch16.3.5xe
ORciscocisco_iosMatch16.3.5bxe
ORciscocisco_iosMatch16.3.6xe
ORciscocisco_iosMatch16.4.1xe
ORciscocisco_iosMatch16.4.2xe
ORciscocisco_iosMatch16.4.3xe
ORciscocisco_iosMatch16.5.1xe
ORciscocisco_iosMatch16.5.1axe
ORciscocisco_iosMatch16.5.1bxe
ORciscocisco_iosMatch16.5.2xe
ORciscocisco_iosMatch16.5.3xe
ORciscocisco_iosMatch3.18.0asxe
ORciscocisco_iosMatch3.18.0sxe
ORciscocisco_iosMatch3.18.1sxe
ORciscocisco_iosMatch3.18.2sxe
ORciscocisco_iosMatch3.18.3sxe
ORciscocisco_iosMatch3.18.4sxe
ORciscocisco_iosMatch3.18.0spxe
ORciscocisco_iosMatch3.18.1spxe
ORciscocisco_iosMatch3.18.1aspxe
ORciscocisco_iosMatch3.18.1gspxe
ORciscocisco_iosMatch3.18.1bspxe
ORciscocisco_iosMatch3.18.1cspxe
ORciscocisco_iosMatch3.18.2spxe
ORciscocisco_iosMatch3.18.1hspxe
ORciscocisco_iosMatch3.18.2aspxe
ORciscocisco_iosMatch3.18.1ispxe
ORciscocisco_iosMatch3.18.3spxe
ORciscocisco_iosMatch3.18.4spxe
ORciscocisco_iosMatch3.18.3aspxe
ORciscocisco_iosMatch3.18.3bspxe
ORciscocisco_iosMatch3.9.0exe
ORciscocisco_iosMatch3.9.1exe
ORciscocisco_iosMatch3.9.2exe
ORciscocisco_iosMatch3.9.2bexe
ORciscocisco_iosMatch16.6.1xe
ORciscocisco_iosMatch16.6.2xe
ORciscocisco_iosMatch16.6.3xe
ORciscocisco_iosMatch16.7.1xe
ORciscocisco_iosMatch16.7.1axe
ORciscocisco_iosMatch16.7.1bxe
ORciscocisco_iosMatch16.7.2xe
ORciscocisco_iosMatch16.8.1xe
ORciscocisco_iosMatch16.8.1axe
ORciscocisco_iosMatch16.8.1bxe
ORciscocisco_iosMatch16.8.1sxe
ORciscocisco_iosMatch16.8.1cxe
ORciscocisco_iosMatch16.8.1dxe
ORciscocisco_iosMatch16.8.2xe
ORciscocisco_iosMatch16.9.1bxe
ORciscocisco_iosMatch16.9.1sxe
ORciscocisco_iosMatch16.9.1cxe
ORciscocisco_iosMatch3.10.0exe
ORciscocisco_iosMatch3.10.1exe
ORciscocisco_iosMatch3.10.0cexe
ORciscocisco_iosMatch3.10.1aexe
ORciscocisco_iosMatch3.10.1sexe
Related
cve
cve
CVE-2019-1757
2019-03-28 01:29:00
nvd
nvd
CVE-2019-1757
2019-03-28 01:29:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2019-03-28 01:29:00
nessus
nessus
