CVE-2008-7138: Eye.fi Eye-Fi Manager

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce.

Affected products

• Eye.fi Eye-Fi Manager: version 1.1.2 only

Published 2009-09-01. Last modified 2026-06-16.