CVE-2015-4217

Name of the Vulnerable Software and Affected Versions Cisco Web Security Virtual Appliance versions prior to 2015-06-25 Cisco Email Security Virtual Appliance versions prior to 2015-06-25 Cisco Security Management Virtual Appliance versions prior to 2015-06-25

Description The issue concerns the remote-support feature on certain Cisco virtual appliances. It uses the same default SSH host keys across different customers' installations. This makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a private key from another installation.

Recommendations For Cisco Web Security Virtual Appliance versions prior to 2015-06-25, update to a version released after 2015-06-25 to ensure unique SSH host keys are used. For Cisco Email Security Virtual Appliance versions prior to 2015-06-25, update to a version released after 2015-06-25 to ensure unique SSH host keys are used. For Cisco Security Management Virtual Appliance versions prior to 2015-06-25, update to a version released after 2015-06-25 to ensure unique SSH host keys are used.