CVE-2011-4872
Low
Description
Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class.
SeverityLow
CVSS2.6
Exploit probability—
ProductHtc Desire Hd
PublishedFeb 5, 2012
First seenFeb 5, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| htc desire_hd | frg83d, gri40 | — |
| htc desire_s | gri40 | — |
| htc droid_incredible | frf91 | — |
| htc evo_3d | gri40 | — |
| htc evo_4g | gri40 | — |
| htc glacier | frg83 | — |
| htc sensation_4g | gri40 | — |
| htc sensation_z710e | gri40 | — |
| htc thunderbolt_4g | frg83d | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.