CVE-2015-0210: w1.fi Wpa Supplicant

Medium severity, CVSS 5.9. EPSS: 0.9% chance of exploitation in the next 30 days.

wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.

Affected products

  • w1.fi Wpa Supplicant: version 2.0-16 only

Published 2017-08-28. Last modified 2026-06-17.