CVE-2014-0738: The Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows re...

Security readout for executives and security teams

This is an old Cisco ASA Phone Proxy authentication bypass issue. A remote attacker could inject a Certificate Trust List file and alter trust relationships. Business urgency depends on whether ASA Phone Proxy is still enabled on ASA Software 9.1(.3) or earlier. Likely exposure is limited to environments still running Cisco ASA Software 9.1(.3) or earlier with the Phone Proxy component in use. The provided data does not identify CPEs, deployment prerequisites, or whether later maintenance releases are affected. Treat as high priority where legacy ASA Phone Proxy remains in production, because trust manipulation on a security appliance can undermine secure communications. If the feature is unused or devices are upgraded, residual urgency is lower. Mitigation focus: Check Cisco advisory guidance for fixed versions or documented workarounds.; Inventory Cisco ASA devices and confirm software versions.; Identify whether Phone Proxy is enabled or externally reachable..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.