CVE-2008-1113

Description

Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

References

http://www.securityfocus.com/bid/27935

http://securitytracker.com/id?1019494

http://secunia.com/advisories/29082

http://seclists.org/fulldisclosure/2008/Feb/0449.html

http://seclists.org/fulldisclosure/2008/Feb/0402.html

http://blogs.zdnet.com/security/?p=901

http://blogs.zdnet.com/security/?p=896

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS