CVE-2000-1008: Palm OS

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, which allows attackers with physical access to the Palm device to decrypt the password and gain access to the device.

Affected products

• Palm Palm OS: up to and including 3.5.2

Published 2000-12-11. Last modified 2026-09-23.