CVE-2023-40282 - Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen

Back Back to CVE browser

MEDIUM

Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen

Published Aug 23, 2023

5.4

MEDIUM

CVSS 3.1

EPSS 0.31%

Description

Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen. As a result, sensitive information may be obtained and/or the settings may be changed.

Affected products

Vendor Rakuten Mobile, Inc. Product Rakuten WiFi Pocket Default
n/a
- Version
  all versions
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rakuten Mobile, Inc.

Rakuten WiFi Pocket

n/a

Version	Status	Constraints
all versions	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44875
Advisory
https://jvn.jp/en/jp/JVN55217369/
Third Party Advisory
https://network.mobile.rakuten.co.jp/product/internet/rakuten-wifi-pocket/support/
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44875		Advisory
https://jvn.jp/en/jp/JVN55217369/		Third Party Advisory
https://network.mobile.rakuten.co.jp/product/internet/rakuten-wifi-pocket/support/		Vendor Advisory