high7.8
CVE-2008-1113
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remot…
Impact
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vocera Communications | Vocera Communications Badge | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://blogs.zdnet.com/security/?p=896
- http://blogs.zdnet.com/security/?p=901
- http://seclists.org/fulldisclosure/2008/Feb/0402.html
- http://seclists.org/fulldisclosure/2008/Feb/0449.html
- http://secunia.com/advisories/29082
- http://securitytracker.com/id?1019494
- http://www.securityfocus.com/bid/27935
- http://blogs.zdnet.com/security/?p=896
- http://blogs.zdnet.com/security/?p=901
- http://seclists.org/fulldisclosure/2008/Feb/0402.html
- http://seclists.org/fulldisclosure/2008/Feb/0449.html
- http://secunia.com/advisories/29082
- http://securitytracker.com/id?1019494
- http://www.securityfocus.com/bid/27935