Lucene search

K
nvd[email protected]NVD:CVE-2008-4540
HistoryOct 13, 2008 - 8:00 p.m.

CVE-2008-4540

2008-10-1320:00:02
CWE-255
web.nvd.nist.gov
6

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

26.1%

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.

Affected configurations

Nvd
Node
htchermes
AND
microsoftwindows_mobileMatch6.0
VendorProductVersionCPE
htchermes*cpe:2.3:h:htc:hermes:*:*:*:*:*:*:*:*
microsoftwindows_mobile6.0cpe:2.3:o:microsoft:windows_mobile:6.0:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

26.1%

Related for NVD:CVE-2008-4540