Published: 14/03/2014 Updated: 14/03/2014

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Intelligent Automation for Cloud (IAC) in Cisco Cloud Portal 9.4.1 and previous versions includes a cryptographic key in binary files, which makes it easier for remote malicious users to obtain cleartext data from an arbitrary IAC installation by leveraging knowledge of this key, aka Bug IDs CSCui34764, CSCui34772, CSCui34776, CSCui34798, CSCui34800, CSCui34805, CSCui34809, CSCui34810, CSCui34813, CSCui34814, and CSCui34818.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cisco cloud portal 9.3.1
cisco cloud portal 9.3.2
cisco cloud portal 9.4
cisco cloud portal 9.1
cisco cloud portal 9.3
cisco cloud portal

Issues in the cryptographic implementation of Cisco Intelligent Automation for Cloud (Cisco IAC) may allow an unauthenticated, remote attacker to recover cryptographic material used in all Cisco IAC installations The issues are due to the inclusion of fixed cryptographic material in the product binaries An attacker that could gain access to encr ...

CWE-255 http://tools.cisco.com/security/center/viewAlert.x?alertId=33336 http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-0694 https://nvd.nist.gov http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20140313-CVE-2014-0694

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2014-0694

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect