CVE-2012-3884

CVE-2012-3884 describes a vulnerability in AirDroid 1.0.4 beta where authentication credentials (password hashes) are transmitted directly over unencrypted HTTP. This allows remote attackers on the local wireless network to easily capture and replay these hashes to gain unauthorized access. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and potential for partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.