Unauthorized Access to Sensitive System Information
CVE-2024-52033

5.3MEDIUM

Key Information:

Vendor
Rakuten Mobile, Inc.
Status
Rakuten Turbo 5g
Vendor
CVE Published:
20 November 2024

Summary

Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi.

Affected Version(s)

Rakuten Turbo 5G V1.3.18 and earlier

References

https://network.mobile.rakuten.co.jp/internet/turbo/infor...
https://jvn.jp/en/vu/JVNVU90667116/

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.