PT-2024-35099 · Rakuten · Rakuten Turbo 5G

Samy Younsi · Published 2024-11-17 · Updated 2024-11-20 · CVE-2024-52033

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Rakuten Turbo 5G firmware versions V1.3.18 and earlier

Description Exposure of sensitive system information to an unauthorized control sphere issue exists. If this issue is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi.

Recommendations For Rakuten Turbo 5G firmware versions V1.3.18 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2024-52033

Affected Products

Rakuten Turbo 5G

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-52033 · Security Note
• https://t.me/cvenotify/102241 · Telegram Post
• https://t.me/cvedetector/11569 · Telegram Post
• https://jvn.jp/en/vu/JVNVU90667116 · Note
• https://network.mobile.rakuten.co.jp/internet/turbo/information/news/3184 · Note
• https://twitter.com/VulmonFeeds/status/1858398961381364096 · Twitter Post
• https://twitter.com/CVEnew/status/1859223854478180394 · Twitter Post
• https://twitter.com/NeroTeamLabs/status/1858396594661634430 · Twitter Post