CVE-2008-1113

Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2008-03-03

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Vocera Communications Badge (Vocera Communications)

References

• http://blogs.zdnet.com/security/?p=896
• http://blogs.zdnet.com/security/?p=901
• http://seclists.org/fulldisclosure/2008/Feb/0402.html
• http://seclists.org/fulldisclosure/2008/Feb/0449.html
• http://secunia.com/advisories/29082
• http://securitytracker.com/id?1019494
• http://www.securityfocus.com/bid/27935