Description
Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.
References
- 4402 third-party-advisory
- windowsmobile-hermes-security-bypass(45857) vdb-entry
- 20081008 Windows Mobile 6 insecure password handling and too short WLAN-password mailing-list