CVE-2011-4872 - CVE House
Back to Database
Status published Low CVE-2011-4872

Multiple HTC Android devices including Desire HD FRG83D and GRI40,...

Vulnerability Description

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2011-4872

Credits & Attribution

No credits recorded in the NVD database.

References

More from htc

View All →
CVE-2019-12177
Privilege escalation due to insecure directory permissions affecting ViveportDesktopService in...
High 7.8
CVE-2019-12176
Privilege escalation in the "HTC Account Service" and "ViveportDesktopService" in...
High 7.8
CVE-2013-4622
The 3G Mobile Hotspot feature on the HTC Droid Incredible...
High 7.5
CVE-2012-2217
The HTC IQRD service for Android on the HTC EVO...
Medium 6.4
CVE-2008-6775
HTC Touch Pro and HTC Touch Cruise vCard allows remote...
High 7.1

Affected Vendor

Affected Software

desire hd, desire s, droid incredible, evo 3d, evo 4g, glacier, sensation 4g, sensation z710e, thunderbolt 4g
Vulnerable Versions:
frg83d, gri40, frf91, frg83

Timeline

Official Publish: February 5th, 2012
Last Modified: September 17th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.