PT-2012-5059 · Sand Studio · Airdroid

Publicado 2012-07-26 · Atualizado 2012-07-27 · CVE-2012-3885

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AirDroid version 1.0.4 beta

Description The default configuration of AirDroid uses a weak password, making it easier for remote attackers to gain access via a brute-force attack.

Recommendations For AirDroid version 1.0.4 beta, consider changing the default password to a stronger one to prevent brute-force attacks.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2012-3885

Produtos afetados

Airdroid

Referências · 3

• 🔥 http://tele-consulting.com/advisories/TC-SA-2012-02.txt · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2012-07/0087.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-3885 · Nota de Segurança