Wefi · Wefi · CVE-2008-3147
Name of the Vulnerable Software and Affected Versions:
WeFi version 3.2.1.4.1
Description:
The issue allows local users to obtain sensitive information, including WEP, WPA, and WPA2 access-point keys, when diagnostic mode is enabled. These keys are stored in cleartext in files such as ClientWeFiLog.dat, ClientWeFiLog.bak, and possibly a certain .inf file under %PROGRAMFILES%WeFiUsers.
Recommendations:
For WeFi version 3.2.1.4.1, consider disabling diagnostic mode to prevent the storage of sensitive information in cleartext. Restrict access to the files ClientWeFiLog.dat, ClientWeFiLog.bak, and any related .inf files under %PROGRAMFILES%WeFiUsers to minimize the risk of exploitation.