← All advisories

Medium severity5.9NVD Advisory· Published Aug 28, 2017· Updated Jun 17, 2026

CVE-2015-0210

CVE-2015-0210

Description

wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7

W1.fi/Wpa Supplicant
cpe:2.3:a:w1.fi:wpa_supplicant:2.0-16:*:*:*:*:*:*:*
Wpa Supplicant/Wpa Supplicantllm-fuzzy
Range: = 2.0-16
osv-coords5 versions
pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Desktop%2012 pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4 pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Server%2012 pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4 pkg:rpm/suse/wpa_supplicant&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012
< 2.2-8.1+ 4 more
- (no CPE)range: < 2.2-8.1
- (no CPE)range: < 0.7.1-6.18.6.1
- (no CPE)range: < 2.2-8.1
- (no CPE)range: < 0.7.1-6.18.6.1
- (no CPE)range: < 2.2-8.1

Patches

Vulnerability mechanics

References

2

bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingPatchThird Party AdvisoryVDB Entry
bugzilla.redhat.com/show_bug.cginvdExploitIssue TrackingThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.