Auth bypass in Softbank Android Smartphone
CVE-2013-2310
SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile smartphones with the WISPrClient application before 1.3.1, SoftBank Disney Mobile Android smartphones with the Wi-Fi application before 1.7.1, and WILLCOM Android smartphones with the Wi-Fi application before 1.7.1, does not properly connect to access points, which allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v2 metric
CVSS v2 base score 3.3 (Low). Vector: AV:A/AC:L/Au:N/C:P/I:N/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.007 (52.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 52nd percentile — 52.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: 0.000
Affected products
- Softbank Android Smartphone — versions 001dl, 001ht, 003p
- Softbank Disney Mobile Android Smartphone — versions dm009sh, dm010sh, dm011sh
- Softbank Mobile Wi-Fi Router — versions 101sb, 102hw, 102z
- Softbank Nec 3g Handset — versions 001n, 931n, 940n
- Softbank Panasonic 3g Handset — versions 001p, 941p, 942p
- Softbank Samsung 3g Handset — versions 941sc
- Softbank Sharp 3g Handset — versions 001n, 001p, 002sh
- Softbank Wi-Fi Application
- Softbank Wi-Fi Spot Configuration Software
- Softbank Windows Mobile Smartphone — versions x01sc, x02t, x04ht