wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-the-middle attack. https://nvd.nist.gov/vuln/detail/CVE-2015-0210
