Read the docs
TI-2012-01981 Aliases CVE-2012-2217GHSA-w7x7-pv7g-c83h

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G…

Priority LOW 32CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.

Why it matters now

EPSS 0.02033 81st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 39

CPEVersionsRoleVendor
cpe:2.3:a:htc:evo_4g_software:*:*:*:*:*:*:*:*up to 4.54.651.1VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:1.32.651.1:*:*:*:*:*:*:*1.32.651.1VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:1.47.651.1:*:*:*:*:*:*:*1.47.651.1VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:3.26.651.6:*:*:*:*:*:*:*3.26.651.6VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:3.29.651.5:*:*:*:*:*:*:*3.29.651.5VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:3.30.651.2:*:*:*:*:*:*:*3.30.651.2VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:3.30.651.3:*:*:*:*:*:*:*3.30.651.3VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:3.70.651.1:*:*:*:*:*:*:*3.70.651.1VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:4.22.651.2:*:*:*:*:*:*:*4.22.651.2VulnerableHTC
cpe:2.3:a:htc:evo_4g_software:4.24.651.1:*:*:*:*:*:*:*4.24.651.1VulnerableHTC
  • cpe:2.3:a:htc:evo_4g_software:*:*:*:*:*:*:*:* Versions up to 4.54.651.1 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:1.32.651.1:*:*:*:*:*:*:* Versions 1.32.651.1 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:1.47.651.1:*:*:*:*:*:*:* Versions 1.47.651.1 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:3.26.651.6:*:*:*:*:*:*:* Versions 3.26.651.6 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:3.29.651.5:*:*:*:*:*:*:* Versions 3.29.651.5 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:3.30.651.2:*:*:*:*:*:*:* Versions 3.30.651.2 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:3.30.651.3:*:*:*:*:*:*:* Versions 3.30.651.3 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:3.70.651.1:*:*:*:*:*:*:* Versions 3.70.651.1 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:4.22.651.2:*:*:*:*:*:*:* Versions 4.22.651.2 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_4g_software:4.24.651.1:*:*:*:*:*:*:* Versions 4.24.651.1 Vulnerable ·HTC
Show 29 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:htc:evo_4g_software:4.53.651.1:*:*:*:*:*:*:*4.53.651.1VulnerableHTC
cpe:2.3:h:htc:evo_4g:-:*:*:*:*:*:*:*not specified by NVDVulnerableHTC
cpe:2.3:h:htc:evo_4g:gri40:*:*:*:*:*:*:*gri40VulnerableHTC
cpe:2.3:a:htc:evo_design_4g_software:*:*:*:*:*:*:*:*up to 1.19.651.1VulnerableHTC
cpe:2.3:a:htc:evo_design_4g_software:1.19.651.0:*:*:*:*:*:*:*1.19.651.0VulnerableHTC
cpe:2.3:h:htc:evo_design_4g:-:*:*:*:*:*:*:*not specified by NVDVulnerableHTC
cpe:2.3:a:htc:shift_4g_software:*:*:*:*:*:*:*:*up to 2.76.651.6VulnerableHTC
cpe:2.3:a:htc:shift_4g_software:1.17.651.1:*:*:*:*:*:*:*1.17.651.1VulnerableHTC
cpe:2.3:a:htc:shift_4g_software:2.75.651.4:*:*:*:*:*:*:*2.75.651.4VulnerableHTC
cpe:2.3:a:htc:shift_4g_software:2.75.651.5:*:*:*:*:*:*:*2.75.651.5VulnerableHTC
cpe:2.3:h:htc:shift_4g:-:*:*:*:*:*:*:*not specified by NVDVulnerableHTC
cpe:2.3:a:htc:evo_3d_software:*:*:*:*:*:*:*:*up to 2.08.651.3VulnerableHTC
cpe:2.3:a:htc:evo_3d_software:1.11.651.3:*:*:*:*:*:*:*1.11.651.3VulnerableHTC
cpe:2.3:a:htc:evo_3d_software:1.13.651.7:*:*:*:*:*:*:*1.13.651.7VulnerableHTC
cpe:2.3:a:htc:evo_3d_software:2.08.651.2:*:*:*:*:*:*:*2.08.651.2VulnerableHTC
cpe:2.3:h:htc:evo_3d:*:*:*:*:*:*:*:*all versionsVulnerableHTC
cpe:2.3:h:htc:evo_3d:gri40:*:*:*:*:*:*:*gri40VulnerableHTC
cpe:2.3:a:htc:evo_view_4g_software:*:*:*:*:*:*:*:*up to 1.22.651.2VulnerableHTC
cpe:2.3:a:htc:evo_view_4g_software:1.22.651.1:*:*:*:*:*:*:*1.22.651.1VulnerableHTC
cpe:2.3:h:htc:evo_view_4g:-:*:*:*:*:*:*:*not specified by NVDVulnerableHTC
cpe:2.3:a:htc:vivid_software:*:*:*:*:*:*:*:*up to 3.26.502VulnerableHTC
cpe:2.3:h:htc:vivid:-:*:*:*:*:*:*:*not specified by NVDVulnerableHTC
cpe:2.3:a:htc:hero_software:1.29.651.1:*:*:*:*:*:*:*1.29.651.1VulnerableHTC
cpe:2.3:a:htc:hero_software:1.56.651.2:*:*:*:*:*:*:*1.56.651.2VulnerableHTC
cpe:2.3:a:htc:hero_software:2.27.651.5:*:*:*:*:*:*:*2.27.651.5VulnerableHTC
cpe:2.3:a:htc:hero_software:2.27.651.6:*:*:*:*:*:*:*2.27.651.6VulnerableHTC
cpe:2.3:a:htc:hero_software:2.31.651.7:*:*:*:*:*:*:*2.31.651.7VulnerableHTC
cpe:2.3:a:htc:hero_software:2.32.651.2:*:*:*:*:*:*:*2.32.651.2VulnerableHTC
cpe:2.3:h:htc:hero:-:*:*:*:*:*:*:*not specified by NVDVulnerableHTC
  • cpe:2.3:a:htc:evo_4g_software:4.53.651.1:*:*:*:*:*:*:* Versions 4.53.651.1 Vulnerable ·HTC
  • cpe:2.3:h:htc:evo_4g:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·HTC
  • cpe:2.3:h:htc:evo_4g:gri40:*:*:*:*:*:*:* Versions gri40 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_design_4g_software:*:*:*:*:*:*:*:* Versions up to 1.19.651.1 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_design_4g_software:1.19.651.0:*:*:*:*:*:*:* Versions 1.19.651.0 Vulnerable ·HTC
  • cpe:2.3:h:htc:evo_design_4g:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·HTC
  • cpe:2.3:a:htc:shift_4g_software:*:*:*:*:*:*:*:* Versions up to 2.76.651.6 Vulnerable ·HTC
  • cpe:2.3:a:htc:shift_4g_software:1.17.651.1:*:*:*:*:*:*:* Versions 1.17.651.1 Vulnerable ·HTC
  • cpe:2.3:a:htc:shift_4g_software:2.75.651.4:*:*:*:*:*:*:* Versions 2.75.651.4 Vulnerable ·HTC
  • cpe:2.3:a:htc:shift_4g_software:2.75.651.5:*:*:*:*:*:*:* Versions 2.75.651.5 Vulnerable ·HTC
  • cpe:2.3:h:htc:shift_4g:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_3d_software:*:*:*:*:*:*:*:* Versions up to 2.08.651.3 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_3d_software:1.11.651.3:*:*:*:*:*:*:* Versions 1.11.651.3 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_3d_software:1.13.651.7:*:*:*:*:*:*:* Versions 1.13.651.7 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_3d_software:2.08.651.2:*:*:*:*:*:*:* Versions 2.08.651.2 Vulnerable ·HTC
  • cpe:2.3:h:htc:evo_3d:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·HTC
  • cpe:2.3:h:htc:evo_3d:gri40:*:*:*:*:*:*:* Versions gri40 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_view_4g_software:*:*:*:*:*:*:*:* Versions up to 1.22.651.2 Vulnerable ·HTC
  • cpe:2.3:a:htc:evo_view_4g_software:1.22.651.1:*:*:*:*:*:*:* Versions 1.22.651.1 Vulnerable ·HTC
  • cpe:2.3:h:htc:evo_view_4g:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·HTC
  • cpe:2.3:a:htc:vivid_software:*:*:*:*:*:*:*:* Versions up to 3.26.502 Vulnerable ·HTC
  • cpe:2.3:h:htc:vivid:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·HTC
  • cpe:2.3:a:htc:hero_software:1.29.651.1:*:*:*:*:*:*:* Versions 1.29.651.1 Vulnerable ·HTC
  • cpe:2.3:a:htc:hero_software:1.56.651.2:*:*:*:*:*:*:* Versions 1.56.651.2 Vulnerable ·HTC
  • cpe:2.3:a:htc:hero_software:2.27.651.5:*:*:*:*:*:*:* Versions 2.27.651.5 Vulnerable ·HTC
  • cpe:2.3:a:htc:hero_software:2.27.651.6:*:*:*:*:*:*:* Versions 2.27.651.6 Vulnerable ·HTC
  • cpe:2.3:a:htc:hero_software:2.31.651.7:*:*:*:*:*:*:* Versions 2.31.651.7 Vulnerable ·HTC
  • cpe:2.3:a:htc:hero_software:2.32.651.2:*:*:*:*:*:*:* Versions 2.32.651.2 Vulnerable ·HTC
  • cpe:2.3:h:htc:hero:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·HTC

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-2217
  2. 2026-10-03 Alias added: GHSA-w7x7-pv7g-c83h

References

Other 2

  • TI-2011-04192 Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid… CVSS 2.0LOW 2.6
  • TI-2011-03515 A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on… CVSS 2.0LOW 2.6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences