HTC WiFi Exploit Patched In Silence

0.0By Jordan Warner February 06, 2012 02:47 PM

Htcpedia news:

Earlier this week HTC rolled out patches to fix an exploit that allowed programs with basic Wi-Fi permissions to take a peek at a user's 802.1X Wi-Fi credentials.

HTC's left a note on the help page of its website stating: "HTC has developed a fix for a small Wi-Fi issue affecting some HTC phones. Most phones have received this fix already through regular updates and upgrades. However, some phones will need to have the fix manually loaded. Please check back next week for more information about this fix and a manual download if you need to update your phone."

That's nice and all but it doesn't really tell us much. This is where Bret Jordan comes in. He's a security architect with Open1X group, and on his blog he gives us more insight on all this. According to the blog, CloudPath's Senior Engineer Chris Hessing discovered the exploit back in September. HTC and Google opted to not release this information to the public when it was initially discovered in order to prevent any attempts of the exploit being implemented before they could develop a patch.

We have yet to find out all the affected devices and which ones need manual updates, but here's a short list of all the known ones until HTC releases the rest.

Affected Versions:
We have verified the following devices as having this issue (there may be others including some non-HTC phones):
Desire HD (both "ace" and "spade" board revisions) - Versions FRG83D, GRI40
Glacier - Version FRG83
Droid Incredible - Version FRF91
Thunderbolt 4G - Version FRG83D
Sensation Z710e - Version GRI40
Sensation 4G - Version GRI40
Desire S - Version GRI40
EVO 3D - Version GRI40
EVO 4G - Version GRI40

Non-Affected Versions:
myTouch3g (Appears to run either unmodified, or only lightly modified
Android build)
Nexus One (Runs unmodified Android build)

Sources: HTC & MyWarWithEntropy Blog

Tags: HTC Exploit HTC WI-FI Exploit Sensation 4G Sensation Z710e Thunderbolt 4G Glacier HTC WiFi Exploit HTC Exploit Patch myTouch3g HTC Affected Phones desire s evo 3d desire hd evo 4g nexus one droid incredible

Rate this: 1 2 3 4 5 Rate

To add comments you need to Login or Register

Add Comment

Comments (0)

To add comments you need to Login or Register