5

CVE-2012-3887

Exploit

EPSS 0.25%
Veröffentlicht 26.07.2012 22:55:01
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Airdroid ≫ Airdroid Updatebeta Version <= 1.0.6

Airdroid ≫ Airdroid Version1.0.1

Airdroid ≫ Airdroid Version1.0.2

Airdroid ≫ Airdroid Version1.0.3

Airdroid ≫ Airdroid Version1.0.4

Airdroid ≫ Airdroid Version1.0.4 Updatebeta

Airdroid ≫ Airdroid Version1.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.25%	0.455

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html

Exploit

http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2012-3887

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3887

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3887

EUVD