Lucene search
HistoryOct 13, 2008 - 8:00 p.m.
CVE-2008-4540
windows mobile
htc hermes
wlan
password bypass
security vulnerability
cve-2008-4540
nvd
7.1 High
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
25.8%
Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.
Affected configurations
Node
htchermes
microsoftwindows_mobileMatch6.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_mobile | microsoft windows mobile | eq | 6.0 |
Related
prion
prion
Design/Logic Flaw
2008-10-13 20:00:00
nvd
nvd
CVE-2008-4540
2008-10-13 20:00:02
cvelist
cvelist
CVE-2008-4540
2008-10-13 18:00:00
7.1 High
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
25.8%
Related for CVE-2008-4540