medium5.0
CVE-2012-3884
AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain ac…
Impact
AirDroid 1.0.4 beta implements authentication through direct transmission of a password hash over HTTP, which makes it easier for remote attackers to obtain access by sniffing the local wireless network and then replaying the authentication data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Airdroid | Airdroid | Version 1.0.4 |