CVE-2008-1113

CVE Database · CVE-2008-1113

CVE-2008-1113

· N/AModified

CVSS v3.1

N/A

EPSS

0.89%

Published

Mar 3, 2008

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

Weaknesses (CWE)

CWE-200

Affected Products (2)

cisco · 7921_wireless_ip_phone

vocera_communications · vocera_communications_badgevulnerable

References (14)

http://blogs.zdnet.com/security/?p=896

http://blogs.zdnet.com/security/?p=901

http://seclists.org/fulldisclosure/2008/Feb/0402.html

http://seclists.org/fulldisclosure/2008/Feb/0449.html

http://secunia.com/advisories/29082

Vendor Advisory