CVE-2008-1114: Vocera Wireless Handset

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates, which allows remote wireless access points to steal hashed passwords and conduct man-in-the-middle (MITM) attacks.

Affected products

• Vocera Wireless Handset: affected versions not specified

Published 2008-03-03. Last modified 2026-06-16.