What’s Vulnerable › Vulnerabilities

CVE-2006-7246

• Severity: medium (CVSS 6.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-01-27 · updated 2026-06-16
• Weakness: CWE-295

Description

NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used.

Affected products

• GNOME NetworkManager: from 0.9.0 through 0.9.9.98
• Opensuse: 11.3, 11.4, 12.1
• SUSE Linux Enterprise Server 15 SP1: 11-sp1
• SUSE Linux Enterprise Server: 11-sp1

References

• http://www.openwall.com/lists/oss-security/2010/04/22/2
• https://bugzilla.gnome.org/show_bug.cgi?id=341323
• https://bugzilla.novell.com/show_bug.cgi?id=574266
• https://lwn.net/Articles/468868/
• http://www.openwall.com/lists/oss-security/2010/04/22/2
• https://bugzilla.gnome.org/show_bug.cgi?id=341323
• https://bugzilla.novell.com/show_bug.cgi?id=574266
• https://lwn.net/Articles/468868/

Get alerted when CVE-2006-7246 or the next vulnerability affects your stack