CVE-2023-40282
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
CVE-2023-40282 describes an improper authentication vulnerability in Rakuten WiFi Pocket devices, allowing a network-adjacent attacker to log into the Management Screen. This may lead to the exposure of sensitive information or changes to the device settings.
Risk Assessment
An attacker could gain access to confidential data and modify device configurations, posing a significant security threat to the network.
Recommendation
It is recommended to update devices to the latest firmware version and implement additional security measures to restrict access to the Management Screen.
Original NVD description (English source)
Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows a network-adjacent attacker to log in to the product's Management Screen. As a result, sensitive information may be obtained and/or the settings may be changed.