| Package | Affected versions | Patched versions |
|---|---|---|
| content security management virtual appliance | = 8.4.0.0150= 9.0.0.087 | |
| email security virtual appliance | = 8.0.0= 8.5.6= 8.5.7= 9.0.0 | |
| web security virtual appliance | = 7.7.5= 8.0.5= 8.5.0= 8.5.1= 8.6.0= 8.7.0 |
The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH root authorized key across different customers' installations, which makes it easier for remote attackers to bypass authentication by leveraging knowledge of a private key from another installation, aka Bug IDs CSCuu95988, CSCuu95994, and CSCuu96630.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free