Htc vulnerabilities
9 vulnerabilities
Known vulnerabilities in Htc products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 33 products.
Products
33- Droid Incredible2 vulnerabilities
- Evo 3D2 vulnerabilities
- Evo 4G2 vulnerabilities
- Viveport2 vulnerabilities
- Chacha1 vulnerabilities
- Customer Link Bridge1 vulnerabilities
- Desire1 vulnerabilities
- Desire Hd1 vulnerabilities
- Desire S1 vulnerabilities
- Evo 3D Software1 vulnerabilities
- Evo 4G Software1 vulnerabilities
- Evo Design 4G1 vulnerabilities
- Evo Design 4G Software1 vulnerabilities
- Evo View 4G1 vulnerabilities
- Evo View 4G Software1 vulnerabilities
- Glacier1 vulnerabilities
- Hero1 vulnerabilities
- Hero Software1 vulnerabilities
- Iptinstaller1 vulnerabilities
- Mail1 vulnerabilities
- Merge1 vulnerabilities
- One1 vulnerabilities
- Sensation 4G1 vulnerabilities
- Sensation Z710E1 vulnerabilities
- Sense1 vulnerabilities
- Shift 4G1 vulnerabilities
- Shift 4G Software1 vulnerabilities
- Thunderbolt 4G1 vulnerabilities
- Vivid1 vulnerabilities
- Vivid Software1 vulnerabilities
- Thunderbolt0 vulnerabilities
- Touch Cruise0 vulnerabilities
- Touch Pro0 vulnerabilities
CVE-2018-1170htccustomer-link_bridge+2
EPSS score0.78%
This vulnerability allows adjacent attackers to inject arbitrary Controller Area Network messages on vulnerable installations of Volkswagen Customer-Link App 1.30 and HTC Customer-Link Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Customer-Link App and Customer-Link Bridge. The issue results from the lack of a proper protection mechanism against unauthorized firmware updates. An attacker can leverage this vulnerability to inject CAN messages. Was ZDI-CAN-5264.CVE-2013-4622htcdroid_incredibleEPSS score1.31%
The 3G Mobile Hotspot feature on the HTC Droid Incredible has a default WPA2 PSK passphrase of 1234567890, which makes it easier for remote attackers to obtain access by leveraging a position within the WLAN coverage area.CVE-2013-10001htcmail+2EPSS score0.64%
A vulnerability was found in HTC One/Sense 4.x. It has been rated as problematic. Affected by this issue is the certification validation of the mail client. An exploit has been disclosed to the public and may be used.CVE-2020-36933htciptinstallerEPSS score0.17%
HTC IPTInstaller 4.0.9 contains an unquoted service path vulnerability in the PassThru Service configuration. Attackers can exploit the unquoted binary path to inject and execute malicious code with elevated LocalSystem privileges.CVE-2012-2980attstatus+8EPSS score1.76%
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.CVE-2012-2217htcevo_3d+13EPSS score2.03%
The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.CVE-2011-4872htcdesire_hd+8EPSS score1.32%
Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a crafted application that uses the android.permission.ACCESS_WIFI_STATE permission to call the toString method on the WifiConfiguration class.CVE-2019-12176htcviveportEPSS score0.32%
Privilege escalation in the "HTC Account Service" and "ViveportDesktopService" in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges to SYSTEM via reconfiguration of either service.CVE-2019-12177htcviveportEPSS score1.40%
Privilege escalation due to insecure directory permissions affecting ViveportDesktopService in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges via DLL hijacking.