Description (CNA)
Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://blogs.zdnet.com/security/?p=896
- http://www.vocera.com/downloads/InfrastructureGuide.pdf
- http://seclists.org/fulldisclosure/2008/Feb/0402.html
- http://www.securityfocus.com/bid/27935
- http://blogs.zdnet.com/security/?p=901
ADP enrichment
No English description supplied.