Cisco and Vocera wireless LAN VoIP devices don't check certificates

["George Ou" <george_ou () lanarchitect net>]

Looks like Vocera's wireless LAN VoIP communicators don't bother to
cryptographically confirm the validity of a digital certificate because it's
too much "processing overhead required".  This is clearly stated in the
Vocera documentation.

I am also waiting for verification on Cisco's wireless VoIP handsets.  I'm
told they have the same design flaw.

That means you can basically put up your own bogus access point with a rogue
RADIUS backend with your own self-signed digital certificate claiming it's
the same as the certificate the client is use to seeing.  Since the client
never bothers to cryptographically check the signature, it thinks it's
talking to the right server and it will send its hashed password or pin to
the server making it very easy to crack.


I have more details here:
http://blogs.zdnet.com/security/?p=896



George Ou

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave