CVE-2008-4540 Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password au...
LowCVSS 2.1
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft windows mobile | = 6.0 | No fix listed |
References
- 4402 third-party-advisory
- 20081008 Windows Mobile 6 insecure password handling and too short WLAN-password mailing-list
- windowsmobile-hermes-security-bypass(45857) vdb-entry