Airdroid app failed to connect update#

Check Point advises AirDroid users to update their application immediately. The company did not reply to a request for comment. “Once exploited, the app enables the attackers to execute code on the device in order to steal data and send it back to their servers,” wrote Oded Vanunu, security research group manager at Check Point and author of the report, adding that an attacker must obtain a valid session token and use the AirDroid API in an attack.Ĭalif-based Sand Studio, the publisher of AirDroid, pushed out security patch (version 3.2.0) to its AirDroid three weeks ago. When user saves the contact to their device, that allows an attacker’s malicious payload to exploit a vulnerability in the AirDroid application, according to the Check Point report. The exploit could be carried out if an attacker sends an SMS message that appears to be a legitimate (vCard) contact. 29.Ĭheck Point security researchers disclosed the AirDroid vulnerability on Thursday, issuing an alert that outlined how attackers could steal data from unsuspecting users.

AirDroid, an app that allows you link an Android device to a computer and send SMS messages, run apps and add contacts via a Wi-Fi connected web browser, released the patch Jan.

A critical vulnerability impacting 50 million Android users running the popular AirDroid application has been patched.