CVE-2013-2310
SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi…
Does this matter?
Lower severity and a low EPSS score (0.73%). Track it; it rarely justifies an emergency change on its own.
Description
SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile smartphones with the WISPrClient application before 1.3.1, SoftBank Disney Mobile Android smartphones with the Wi-Fi application before 1.7.1, and WILLCOM Android smartphones with the Wi-Fi application before 1.7.1, does not properly connect to access points, which allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network.
- CVSS 2.0
- 3.3 LOWAV:A/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.73% probability · 52th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- softbank/wi-fi spot configuration software · softbank/mobile wi-fi router · softbank/nec 3g handset · softbank/panasonic 3g handset · softbank/samsung 3g handset · softbank/sharp 3g handset · softbank/wi-fi application · softbank/android smartphone · softbank/wisprclient · softbank/windows mobile smartphone · softbank/disney mobile android smartphone · willcom-inc/wi-fi application · willcom-inc/android smartphone
- Source
- vultures@jpcert.or.jp
References
- http://jvn.jp/en/jp/JVN85371480/397327/index.html
- http://jvn.jp/en/jp/JVN85371480/995319/index.html
- http://jvn.jp/en/jp/JVN85371480/995417/index.html
- http://jvn.jp/en/jp/JVN85371480/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000039
- http://jvn.jp/en/jp/JVN85371480/397327/index.html
- http://jvn.jp/en/jp/JVN85371480/995319/index.html
- http://jvn.jp/en/jp/JVN85371480/995417/index.html
- http://jvn.jp/en/jp/JVN85371480/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000039
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.