CVE-2012-3884 AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless netwo...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| airdroid | = 1.0.4-beta | No fix listed |
References
- 20120712 security advisory: AirDroid 1.0.4 beta exploit mailing-list
- www.tele-consulting.com exploit