Hardcoded SSL Certificate Detection

info Nessus Network Monitor Plugin ID 7280

Synopsis

A hardcoded, non-unique X.509 certificate has been detected.

Description

The remote host is using a hardcoded, non-unique X.509 certificate. This may allow a remote, unauthenticated attacker to carry out impersonation, man-in-the-middle, or passive decryption attacks, resulting in sensitive information exposure.

Solution

Where possible, users of affected devices should manually replace X.509 certificates so that they are unique to the device.

Plugin Details

Severity: Info

ID: 7280

Version: 1.0

Family: Generic

Published: 8/20/2017

Updated: 8/16/2018

Detections

Analytics