Vulnerabilities > CVE-2008-4540 - Credentials Management vulnerability in Microsoft Windows Mobile 6.0

047910
CVSS 2.1 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
htc
microsoft
CWE-255

Summary

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.

Vulnerable Configurations

Part Description Count
Hardware
Htc
1
OS
Microsoft
1

Common Weakness Enumeration (CWE)