Code injection

2015-09-1121:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.8%

JSON

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attackers to bypass a URL whitelist protection mechanism and obtain API access via unspecified vectors.

CPENameOperatorVersion
japan_connected-free_wi-file1.6.0
japan_connected-free_wi-file1.0.2

CPE	Name	Operator	Version
	japan_connected-free_wi-fi	le	1.6.0
	japan_connected-free_wi-fi	le	1.0.2

References

jvn.jp/en/jp/JVN04644117/index.html

jvndb.jvn.jp/jvndb/JVNDB-2015-000115

itunes.apple.com/en/app/japan-connected-free-wi-fi/id810838196?mt=8

play.google.com/store/apps/details?id=com.nttbp.jfw