Lucene search
HistoryOct 03, 2022 - 4:13 p.m.
CVE-2008-1113
cisco
7921
vulnerability
mitm
peap
nvd
cve-2008-1113
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.4%
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
Affected configurations
Node
cisco7921_wireless_ip_phone
vocera_communicationsvocera_communications_badge
Related
cvelist
cvelist
CVE-2008-1113
2022-10-03 16:13:47
nvd
nvd
CVE-2008-1113
2008-03-03 18:44:00
prion
prion
Authentication flaw
2008-03-03 18:44:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
6.7 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
55.4%
Related for CVE-2008-1113