CVE-2008-4540: Microsoft Windows Mobile

Low severity, CVSS 2.1. EPSS: 2% chance of exploitation in the next 30 days.

Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access.

Affected products

• Microsoft Windows Mobile: version 6.0 only

Published 2008-10-13. Last modified 2026-06-16.