Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2009-4144

21
FAUCET Score

CVE-2009-4144 describes a vulnerability in NetworkManager (NM) 0.7.2 where the absence of a configured CA certificate for WPA Enterprise or 802.1x networks could allow remote attackers to spoof wireless network identities. This medium-severity flaw (CVSS 6.8) could lead to information disclosure, denial of service, or compromise of integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
0.7.2CPE matchmatch criteria
cpe:2.3:a:gnome:networkmanager:0.7.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.8MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
1.90%
Probability of exploitation in next 30 days
EPSS Percentile
77.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0190 is in the 60th percentile among its peer group of 19,954 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (1)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: NetworkManager-1:0.7.0-9.el5_4
View patch

Vendor Advisories (1)

redhatCVE-2009-4144Moderate

NetworkManager: WPA enterprise network not verified when certificate is removed

Dec 8, 2009

References

bugs.debian.org / cgi-bin/bugreport.cgi
git.gnome.org / browse/network-manager-applet/commit
lists.opensuse.org / opensuse-security-announce/2010-02/msg00000.html
bugzilla.redhat.com / show_bug.cgi
secunia.com / advisories/38420
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11315
openwall.com / lists/oss-security/2009/12/16/3
redhat.com / support/errata/RHSA-2010-0108.html
securityfocus.com / bid/37580