CVE-2014-5868

Cisco Technical Support 3.7.1 - Man-in-the-Middle Information Disclosure via Unverified X.509 Certificates

Title source: llm
STIX 2.1

Description

The Cisco Technical Support (aka com.cisco.swtg_android) application 3.7.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

References (3)

Core 3
Core References
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/582497
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/698569

Scores

EPSS 0.0027
EPSS Percentile 19.2%

Details

CWE
CWE-310
Status published
Products (1)
cisco/cisco_technical_support 3.7.1
Published Sep 11, 2014
Tracked Since Feb 18, 2026