← Database

CVE-2008-1114

MEDIUM CVSS: 4.3 Published: 2008-03-03 Modified: 2026-06-16

Description

Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

Affected Platforms

Vocera Wireless Handset

Weakness Type

CWE-20

References