FKIE_CVE-2011-4872

Vulnerability from fkie_nvd - Published: 2012-02-05 11:55 - Updated: 2026-06-16 23:35
Severity
Summary
Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class.
References
cret@cert.orghttp://archives.neohapsis.com/archives/bugtraq/2012-02/0002.html
cret@cert.orghttp://blog.mywarwithentropy.com/2012/02/8021x-password-exploit-on-many-htc.html
cret@cert.orghttp://secunia.com/advisories/47837Vendor Advisory
cret@cert.orghttp://www.kb.cert.org/vuls/id/763355US Government Resource
cret@cert.orghttp://www.securityfocus.com/bid/51790
af854a3a-2127-422b-91ae-364da2661108http://archives.neohapsis.com/archives/bugtraq/2012-02/0002.html
af854a3a-2127-422b-91ae-364da2661108http://blog.mywarwithentropy.com/2012/02/8021x-password-exploit-on-many-htc.html
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/47837Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/763355US Government Resource
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/51790
Impacted products
Vendor Product Version
htc desire_hd frg83d
htc desire_hd gri40
htc desire_s gri40
htc droid_incredible frf91
htc evo_3d gri40
htc evo_4g gri40
htc glacier frg83
htc sensation_4g gri40
htc sensation_z710e gri40
htc thunderbolt_4g frg83d
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cret@cert.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:htc:desire_hd:frg83d:*:*:*:*:*:*:*",
              "matchCriteriaId": "A47D18AA-CFF9-4AD8-AE88-2CA747123EBE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:desire_hd:gri40:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0653264-C983-4944-9C58-FB66695810B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:desire_s:gri40:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9F69A6B-DE64-40FD-9A0D-4F58A0D40876",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:droid_incredible:frf91:*:*:*:*:*:*:*",
              "matchCriteriaId": "104EFEA6-6768-4BC4-BB79-636607F6B633",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:evo_3d:gri40:*:*:*:*:*:*:*",
              "matchCriteriaId": "04CE53C2-E91D-4E99-820A-D06BA1BBAAD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:evo_4g:gri40:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF9842B1-3735-48CC-9163-36253B9C5AF6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:glacier:frg83:*:*:*:*:*:*:*",
              "matchCriteriaId": "41DA09C0-2C0F-4605-A9ED-B76436FC8969",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:sensation_4g:gri40:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A373B93-7BA1-474E-99E8-B0507A317C7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:sensation_z710e:gri40:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F11BB06-D097-48F9-9B39-28916BB3CA1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:htc:thunderbolt_4g:frg83d:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F8DC280-89A4-482C-BCBA-7721E898935A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class."
    },
    {
      "lang": "es",
      "value": "M\u00faltiples dispositivos Android HTC incluyendo Desire HD FRG83D y GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40 y EVO 4G GRI40 permiten a atacantes remotos obtener las credenciales Wi-Fi 802.1X y el SSID a trav\u00e9s de una aplicaci\u00f3n modificada que utiliza el permiso android.permission.ACCESS_WIFI_STATE para invocar el m\u00e9todo toString en la clase WifiConfiguration."
    }
  ],
  "id": "CVE-2011-4872",
  "lastModified": "2026-06-16T23:35:33.113",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "LOW",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 2.6,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:H/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 4.9,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2012-02-05T11:55:03.047",
  "references": [
    {
      "source": "cret@cert.org",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0002.html"
    },
    {
      "source": "cret@cert.org",
      "url": "http://blog.mywarwithentropy.com/2012/02/8021x-password-exploit-on-many-htc.html"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/47837"
    },
    {
      "source": "cret@cert.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/763355"
    },
    {
      "source": "cret@cert.org",
      "url": "http://www.securityfocus.com/bid/51790"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://archives.neohapsis.com/archives/bugtraq/2012-02/0002.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://blog.mywarwithentropy.com/2012/02/8021x-password-exploit-on-many-htc.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/47837"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/763355"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/51790"
    }
  ],
  "sourceIdentifier": "cret@cert.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.