3.3

CVE-2013-2310

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile smartphones with the WISPrClient application before 1.3.1, SoftBank Disney Mobile Android smartphones with the Wi-Fi application before 1.7.1, and WILLCOM Android smartphones with the Wi-Fi application before 1.7.1, does not properly connect to access points, which allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SoftbankMobile Wi-fi Router Version101sb
SoftbankMobile Wi-fi Router Version102hw
SoftbankMobile Wi-fi Router Version102z
SoftbankNec 3g Handset Version001n
SoftbankNec 3g Handset Version931n
SoftbankNec 3g Handset Version940n
SoftbankPanasonic 3g Handset Version001p
SoftbankPanasonic 3g Handset Version941p
SoftbankPanasonic 3g Handset Version942p
SoftbankSamsung 3g Handset Version941sc
SoftbankSharp 3g Handset Version001n
SoftbankSharp 3g Handset Version001p
SoftbankSharp 3g Handset Version002sh
SoftbankSharp 3g Handset Version004sh
SoftbankSharp 3g Handset Version004shp3
SoftbankSharp 3g Handset Version931n
SoftbankSharp 3g Handset Version940n
SoftbankSharp 3g Handset Version940sh
SoftbankSharp 3g Handset Version941p
SoftbankSharp 3g Handset Version941sc
SoftbankSharp 3g Handset Version941sh
SoftbankSharp 3g Handset Version942p
SoftbankSharp 3g Handset Version943sh
SoftbankSharp 3g Handset Version944sh
SoftbankSharp 3g Handset Version945sh
SoftbankSharp 3g Handset Version945shg
SoftbankWi-fi Application Version <= 1.7.0
SoftbankAndroid Smartphone Version001dl
SoftbankAndroid Smartphone Version001ht
SoftbankAndroid Smartphone Version003p
SoftbankAndroid Smartphone Version003sh
SoftbankAndroid Smartphone Version003z
SoftbankAndroid Smartphone Version005sh
SoftbankAndroid Smartphone Version006sh
SoftbankAndroid Smartphone Version007hw
SoftbankAndroid Smartphone Version007sh
SoftbankAndroid Smartphone Version007sh Updatej
SoftbankAndroid Smartphone Version007sh Updatekt
SoftbankAndroid Smartphone Version008z
SoftbankAndroid Smartphone Version009sh
SoftbankAndroid Smartphone Version009sh Updatey
SoftbankAndroid Smartphone Version009z
SoftbankAndroid Smartphone Version101dl
SoftbankAndroid Smartphone Version101f
SoftbankAndroid Smartphone Version101k
SoftbankAndroid Smartphone Version101n
SoftbankAndroid Smartphone Version101p
SoftbankAndroid Smartphone Version101sh
SoftbankAndroid Smartphone Version102p
SoftbankAndroid Smartphone Version102sh
SoftbankAndroid Smartphone Version102sh Updateii
SoftbankAndroid Smartphone Version103sh
SoftbankAndroid Smartphone Version104sh
SoftbankAndroid Smartphone Version106sh
SoftbankAndroid Smartphone Version107sh
SoftbankAndroid Smartphone Version200sh
SoftbankAndroid Smartphone Version201hw
SoftbankAndroid Smartphone Version201k
SoftbankAndroid Smartphone Version201m
SoftbankAndroid Smartphone Versionx06ht
SoftbankAndroid Smartphone Versionx06ht Updateii
SoftbankWisprclient Version <= 1.3.0
SoftbankWi-fi Application Version <= 1.7.0
Willcom-incWi-fi Application Version <= 1.7.0
Willcom-incAndroid Smartphone Versionwx04k
Willcom-incAndroid Smartphone Versionwx06k
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.39
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:P/I:N/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.