CVE-2008-1113
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol ...
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
Exploit likelihood
What each source reports
NVD Score used
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
- Record
CVE-2008-1113- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:C/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
- Record
CVE-2008-1113- Updated
- 2026-11-02
EUVDEUVD-2008-1122 No score
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
- Record
EUVD-2008-1122- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mx3g-c2pm-2gmw No score
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol ...
Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
- Record
GHSA-mx3g-c2pm-2gmw- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1113 is a high vulnerability (CVSS 7.8) in Vocera Communications Badge, published March 3, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. No source names a fixed version.
References
blogs.zdnet.com/security?p=896
seclists.org/fulldisclosure/2008/Feb/0449.html
securitytracker.com/id?1019494
securityfocus.com/bid/27935
secunia.com/advisories/29082
nvd.nist.gov/vuln/detail/CVE-2008-1113
github.com/advisories/GHSA-mx3g-c2pm-2gmw