CVE-2014-0739: Race condition in the Phone Proxy component in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and...

Security readout for executives and security teams

Cisco ASA devices using the Phone Proxy feature may let an untrusted device receive pass-through services without normal sec_db authentication. The cited record ties this to ASA Software 9.1(3) and earlier. Business urgency depends on whether Phone Proxy is enabled and reachable. Likely exposure is limited to Cisco ASA deployments running 9.1(3) or earlier with Phone Proxy enabled or reachable. The provided affected-products metadata is incomplete, so confirm against Cisco’s advisory and local configuration. Treat as a targeted legacy ASA exposure check, not a blanket emergency from the provided evidence. Prioritize if ASA Phone Proxy is still used on affected versions or exposed to untrusted devices. Mitigation focus: Check Cisco’s security notice for fixed releases and official workarounds.; Inventory ASA versions and prioritize devices running 9.1(3) or earlier.; Confirm whether Phone Proxy is enabled and business-required..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.