5

CVE-2012-3887

Exploit

EPSS 0.25%
Published 26.07.2012 22:55:01
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI.

Affected products Warnungen 0 Metrics 2 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Airdroid ≫ Airdroid Updatebeta Version <= 1.0.6

Airdroid ≫ Airdroid Version1.0.1

Airdroid ≫ Airdroid Version1.0.2

Airdroid ≫ Airdroid Version1.0.3

Airdroid ≫ Airdroid Version1.0.4

Airdroid ≫ Airdroid Version1.0.4 Updatebeta

Airdroid ≫ Airdroid Version1.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.25%	0.455

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html

Exploit

http://www.tele-consulting.com/advisories/TC-SA-2012-02.txt

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2012-3887

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-3887

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-3887

EUVD