CVE-2008-4540: Low severity htc hermes vulnerability
Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4540?
CVE-2008-4540 is considered a medium severity vulnerability due to the potential for unauthorized WLAN access.
How does CVE-2008-4540 affect Windows Mobile 6 on HTC Hermes devices?
CVE-2008-4540 allows attackers to access WLAN passwords through an auto-completion mechanism, facilitating password authentication bypass.
Who is vulnerable to CVE-2008-4540?
Users of Windows Mobile 6 on HTC Hermes devices are specifically vulnerable to CVE-2008-4540.
What can I do to mitigate CVE-2008-4540?
To mitigate CVE-2008-4540, consider disabling auto-completion for password fields and securing physical access to devices.
Is CVE-2008-4540 a hardware issue or software issue?
CVE-2008-4540 is a software issue related to Windows Mobile 6 on the HTC Hermes device.