Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-2217

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.

Published

2012-05-01T14:55:01.673

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

4.9

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application htc evo_4g_software ≤ 4.54.651.1 Yes
Application htc evo_4g_software 1.32.651.1 Yes
Application htc evo_4g_software 1.47.651.1 Yes
Application htc evo_4g_software 3.26.651.6 Yes
Application htc evo_4g_software 3.29.651.5 Yes
Application htc evo_4g_software 3.30.651.2 Yes
Application htc evo_4g_software 3.30.651.3 Yes
Application htc evo_4g_software 3.70.651.1 Yes
Application htc evo_4g_software 4.22.651.2 Yes
Application htc evo_4g_software 4.24.651.1 Yes
Application htc evo_4g_software 4.53.651.1 Yes
Hardware htc evo_4g - Yes
Hardware htc evo_4g gri40 Yes
Application htc evo_design_4g_software ≤ 1.19.651.1 Yes
Application htc evo_design_4g_software 1.19.651.0 Yes
Hardware htc evo_design_4g - Yes
Application htc shift_4g_software ≤ 2.76.651.6 Yes
Application htc shift_4g_software 1.17.651.1 Yes
Application htc shift_4g_software 2.75.651.4 Yes
Application htc shift_4g_software 2.75.651.5 Yes
Hardware htc shift_4g - Yes
Application htc evo_3d_software ≤ 2.08.651.3 Yes
Application htc evo_3d_software 1.11.651.3 Yes
Application htc evo_3d_software 1.13.651.7 Yes
Application htc evo_3d_software 2.08.651.2 Yes
Hardware htc evo_3d * Yes
Hardware htc evo_3d gri40 Yes
Application htc evo_view_4g_software ≤ 1.22.651.2 Yes
Application htc evo_view_4g_software 1.22.651.1 Yes
Hardware htc evo_view_4g - Yes
Application htc vivid_software ≤ 3.26.502 Yes
Hardware htc vivid - Yes
Application htc hero_software 1.29.651.1 Yes
Application htc hero_software 1.56.651.2 Yes
Application htc hero_software 2.27.651.5 Yes
Application htc hero_software 2.27.651.6 Yes
Application htc hero_software 2.31.651.7 Yes
Application htc hero_software 2.32.651.2 Yes
Hardware htc hero - Yes
References