CVE-2012-3887
Last modified
CVE-2012-3887 is a vulnerability of currently unknown severity. AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI.. EPSS estimates a 1.26% chance of exploitation in the next 30 days.
Description
AirDroid before 1.0.7 beta uses a cleartext base64 format for data transfer that is documented as an "Encrypted Transmission" feature, which allows remote attackers to obtain sensitive information by sniffing the local wireless network, as demonstrated by the SMS message content sent to the sdctl/sms/send/single/ URI.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Airdroid | Airdroid | <= 1.0.6 | Beta |
| Airdroid | Airdroid | 1.0.1 | — |
| Airdroid | Airdroid | 1.0.2 | — |
| Airdroid | Airdroid | 1.0.3 | — |
| Airdroid | Airdroid | 1.0.4 | — |
| Airdroid | Airdroid | 1.0.5 | — |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2012-3887?
How severe is CVE-2012-3887?
How do I fix CVE-2012-3887?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2012
- CVE-2012-3873Multiple SQL injection vulnerabilities in Open Constructor 3…
- CVE-2012-3878Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2012-3881Multiple SQL injection vulnerabilities in RTG 0.7.4 and RTG2…
- CVE-2012-3884AirDroid 1.0.4 beta implements authentication through direct…
- CVE-2012-3885The default configuration of AirDroid 1.0.4 beta uses a four…
- CVE-2012-3886AirDroid 1.0.4 beta uses the MD5 algorithm for values in the…
- CVE-2012-3888The login implementation in AirDroid 1.0.4 beta allows remot…
- CVE-2012-3889The in_mod plugin in Winamp before 5.63 allows remote attack…
- CVE-2012-3890The in_mod plugin in Winamp before 5.63 allows remote attack…
- CVE-2012-3893The FlexVPN implementation in Cisco IOS 15.2 and 15.3 allows…
- CVE-2012-3895Cisco IOS 15.0 through 15.3 allows remote authenticated user…
- CVE-2012-3899sensorApp on Cisco IPS 4200 series sensors 6.0, 6.2, and 7.0…
Are you affected by CVE-2012-3887?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST