PT-2013-3654 · Microsoft+1 · Windows Mobile+2

Masashi Sakai · Published 2013-06-17 · Updated 2013-06-17 · CVE-2013-2310

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SoftBank Wi-Fi Spot Configuration Software versions prior to 1.7.1 SoftBank Windows Mobile smartphones with the WISPrClient application versions prior to 1.3.1

Description The issue allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network, due to the software's failure to properly connect to access points.

Recommendations For SoftBank Wi-Fi Spot Configuration Software versions prior to 1.7.1, update to version 1.7.1 or later. For SoftBank Windows Mobile smartphones with the WISPrClient application versions prior to 1.3.1, update to version 1.3.1 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-2310

Affected Products

Softbank Wi-Fi Spot Configuration

Wisprclient

Windows Mobile

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2013-2310 · Security Note
• http://jvndb.jvn.jp/jvndb/JVNDB-2013-000039 · Note
• http://jvn.jp/en/jp/JVN85371480/995417/index.html · Note
• http://jvn.jp/en/jp/JVN85371480/995319/index.html · Note
• http://jvn.jp/en/jp/JVN85371480/397327/index.html · Note
• http://jvn.jp/en/jp/JVN85371480/index.html · Note