CVE-2023-40282

2023-08-2303:16:56

jpcert

www.cve.org

authentication

vulnerability

rakuten wifi pocket

network-adjacent attacker

management screen

sensitive information.

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

18.3%

JSON

Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product’s Management Screen. As a result, sensitive information may be obtained and/or the settings may be changed.

CNA Affected

[
  {
    "vendor": "Rakuten Mobile, Inc.",
    "product": "Rakuten WiFi Pocket",
    "versions": [
      {
        "version": "all versions",
        "status": "affected"
      }
    ]
  }
]