CVE-2023-40282: Medium severity rakuten wifi pocket vulnerability
Published Aug 23, 2023
·Updated
UNSUPPPORTED WHEN ASSIGNED Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen. As a result, sensitive information may be obtained and/or the settings may be changed.
Affected Software
4 affected components
Rakuten Wifi Pocket Firmware
Rakuten WiFi Pocket
All of the following
Rakuten Wifi Pocket Firmware
Rakuten WiFi Pocket
Event History
Aug 23, 2023
CVE Published
via MITRE·03:16 AM
Data Sourced
via MITRE·03:16 AM
DescriptionWeakness
Unsupported
04:15 AM
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this security issue?
The vulnerability ID is CVE-2023-40282.
2
What is the severity of CVE-2023-40282?
The severity of CVE-2023-40282 is medium with a CVSS score of 5.4.
3
What is the affected software?
The affected software is Rakuten Wifi Pocket Firmware.
4
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by being network-adjacent and logging in to the product's Management Screen.
5
What can happen if this vulnerability is exploited?
If this vulnerability is exploited, sensitive information may be obtained and/or the settings may be changed.