What is the CVSS score of CVE-2013-2310?

CVE-2013-2310 has a CVSS 2.0 base score of 3.3 (Low). CVSS vector: AV:A/AC:L/Au:N/C:P/I:N/A:N. EPSS exploitation probability: 0.2%.

Wi Fi Spot Configuration Software CVE-2013-2310

LOW

Improper Authentication (CWE-287)

2013-06-17 vultures@jpcert.or.jp

Samsung Google Microsoft Authentication Bypass Wi Fi Spot Configuration Software Mobile Wi Fi Router Nec 3G Handset Panasonic 3G Handset Samsung 3G Handset Sharp 3G Handset Wi Fi Application Android Smartphone Wisprclient Windows Mobile Smartphone Disney Mobile Android Smartphone

3.3

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

3.3 LOW

AV:A/AC:L/Au:N/C:P/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:A/AC:L/Au:N/C:P/I:N/A:N

Attack Vector

Adjacent

Attack Complexity

Low

Confidentiality

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Jun 17, 2013 - 03:29 cve.org

LOW 3.3

DescriptionCVE.org

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile smartphones with the WISPrClient application before 1.3.1, SoftBank Disney Mobile Android smartphones with the Wi-Fi application before 1.7.1, and WILLCOM Android smartphones with the Wi-Fi application before 1.7.1, does not properly connect to access points, which allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Improper Authentication (CWE-287), which allows attackers to bypass authentication mechanisms to gain unauthorized access. SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi routers, SoftBank Android smartphones with the Wi-Fi application before 1.7.1, SoftBank Windows Mobile smartphones with the WISPrClient application before 1.3.1, SoftBank Disney Mobile Android smartphones with the Wi-Fi application before 1.7.1, and WILLCOM Android smartphones with the Wi-Fi application before 1.7.1, does not properly connect to access points, which allows remote attackers to obtain sensitive information by leveraging access to an 802.11 network. Affected products include: Softbank Wi-Fi Spot Configuration Software, Softbank Mobile Wi-Fi Router, Softbank Nec 3G Handset, Softbank Panasonic 3G Handset, Softbank Samsung 3G Handset. Version information: before 1.7.1.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement multi-factor authentication, enforce strong password policies, use proven authentication frameworks.