JVN#41048401: Japan Connected-free Wi-Fi vulnerable to script injection

Japan Connected-free Wi-Fi provided by NTT Broadband Platform, Inc. is vulnerable to script injection when displaying malformed strings contained in SSID.

Impact

When the device running the app connects to an access point and its SSID contains malicious script, the script may be executed.

Solution

Update the Software
Update to the latest version according to the information provided by the developer.

Products Affected

• Japan Connected-free Wi-Fi for Android 1.6.0 and earlier
• Japan Connected-free Wi-Fi for iOS 1.0.2 and earlier