VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 5, 2012· Updated Apr 29, 2026

CVE-2011-4872

CVE-2011-4872

Description

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class.

Affected products

10
  • Htc/Desire Hd2 versions
    cpe:2.3:h:htc:desire_hd:frg83d:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:htc:desire_hd:frg83d:*:*:*:*:*:*:*
    • cpe:2.3:h:htc:desire_hd:gri40:*:*:*:*:*:*:*
  • Htc/Desire S
    cpe:2.3:h:htc:desire_s:gri40:*:*:*:*:*:*:*
  • Htc/Droid Incredible
    cpe:2.3:h:htc:droid_incredible:frf91:*:*:*:*:*:*:*
  • Htc/Evo 3d
    cpe:2.3:h:htc:evo_3d:gri40:*:*:*:*:*:*:*
  • Htc/Evo 4g
    cpe:2.3:h:htc:evo_4g:gri40:*:*:*:*:*:*:*
  • Htc/Glacier
    cpe:2.3:h:htc:glacier:frg83:*:*:*:*:*:*:*
  • Htc/Sensation 4g
    cpe:2.3:h:htc:sensation_4g:gri40:*:*:*:*:*:*:*
  • Htc/Sensation Z710e
    cpe:2.3:h:htc:sensation_z710e:gri40:*:*:*:*:*:*:*
  • Htc/Thunderbolt 4g
    cpe:2.3:h:htc:thunderbolt_4g:frg83d:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.