5

CVE-2012-3887

Exploit
AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Airdroid ≫ Airdroid Updatebeta Version <= 1.0.6
Airdroid ≫ Airdroid Version1.0.1
Airdroid ≫ Airdroid Version1.0.2
Airdroid ≫ Airdroid Version1.0.3
Airdroid ≫ Airdroid Version1.0.4
Airdroid ≫ Airdroid Version1.0.4 Updatebeta
Airdroid ≫ Airdroid Version1.0.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.26% 0.658
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html
Exploit
http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt
Exploit