CVE-2008-3147

Name: CVE-2008-3147
Creator: NVD / NIST
Published: 2008-07-11T19:41:00+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.30%

Last modified Jun 16, 2026

CVE-2008-3147 is a vulnerability of currently unknown severity. WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%\WeFi\Users\, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain sensitive information by reading these files.. EPSS estimates a 0.30% chance of exploitation in the next 30 days.

Description

WeFi 3.2.1.4.1, when diagnostic mode is enabled, stores (1) WEP, (2) WPA, and (3) WPA2 access-point keys in (a) ClientWeFiLog.dat, (b) ClientWeFiLog.bak, and possibly (c) a certain .inf file under %PROGRAMFILES%\WeFi\Users\, and uses cleartext for the ClientWeFiLog files, which allows local users to obtain sensitive information by reading these files.

Metrics

EPSS Probability

0.30%

21.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-200

Affected Software

Vendor	Product	Versions
Wefi	Wefi	3.2.1.4.1

References

Timeline

Published: Jul 11, 2008
Last Modified: Jun 16, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2008-3147?

How severe is CVE-2008-3147?

Severity scoring for CVE-2008-3147 is pending analysis. The EPSS model estimates a 0.30% probability of exploitation in the next 30 days.

How do I fix CVE-2008-3147?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2008-3147?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST