← back
CVE-2008-1114

CVE-2008-1114

EPSS 0.6%
Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://blogs.zdnet.com/security/?p=896http://blogs.zdnet.com/security/?p=901http://seclists.org/fulldisclosure/2008/Feb/0402.htmlhttp://www.securityfocus.com/bid/27935http://www.vocera.com/downloads/InfrastructureGuide.pdf