PT-2013-3654 · Microsoft+1 · Windows Mobile+2

Masashi Sakai · Publicado 2013-06-17 · Atualizado 2013-06-17 · CVE-2013-2310

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SoftBank Wi-Fi Spot Configuration Software versions prior to 1.7.1 SoftBank Windows Mobile smartphones with the WISPrClient application versions prior to 1.3.1

Description The issue allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network, due to the software's failure to properly connect to access points.

Recommendations For SoftBank Wi-Fi Spot Configuration Software versions prior to 1.7.1, update to version 1.7.1 or later. For SoftBank Windows Mobile smartphones with the WISPrClient application versions prior to 1.3.1, update to version 1.3.1 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2013-2310

Produtos afetados

Softbank Wi-Fi Spot Configuration

Wisprclient

Windows Mobile

Referências · 6

• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000039 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-2310 · Nota de Segurança
• http://jvn.jp/en/jp/JVN85371480/995417/index.html · Nota
• http://jvn.jp/en/jp/JVN85371480/995319/index.html · Nota
• http://jvn.jp/en/jp/JVN85371480/397327/index.html · Nota
• http://jvn.jp/en/jp/JVN85371480/index.html · Nota