Lucene search
MitreCVE-2008-1113HistoryMar 03, 2008 - 6:44 p.m.
CVE-2008-1113
2008-03-0318:44:00
CWE-200
mitre
web.nvd.nist.gov
21
cisco
7921
vulnerability
mitm
peap
nvd
cve-2008-1113
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.7
Confidence
High
EPSS
0.005
Percentile
77.0%
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
Affected configurations
Node
cisco7921_wireless_ip_phone
vocera_communicationsvocera_communications_badge
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | 7921_wireless_ip_phone | * | cpe:2.3:h:cisco:7921_wireless_ip_phone:*:*:*:*:*:*:*:* |
| vocera_communications | vocera_communications_badge | * | cpe:2.3:a:vocera_communications:vocera_communications_badge:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2008-1113
2008-03-03 18:00:00
prion
prion
Authentication flaw
2008-03-03 18:44:00
nvd
nvd
CVE-2008-1113
2008-03-03 18:44:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
6.7
Confidence
High
EPSS
0.005
Percentile
77.0%
Related for CVE-2008-1113