Skip to main content

Softbank

6 CVEs vendor

Monthly

CVE-2022-43543 Dec 21, 09:15 MEDIUM This Month

KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Apple Message Kddi +1
NVD
CVSS 3.1
5.4
EPSS
0.5%
CVE-2021-20783 Jul 30, 14:15 HIGH This Week

Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Optical Bb Unit E Wmta Firmware Softbank
NVD
CVSS 3.1
8.8
EPSS
0.6%
CVE-2018-0691 Nov 15, 15:29 MEDIUM PATCH This Month

Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Google Apple Message Kddi +1
NVD
CVSS 3.0
5.9
EPSS
0.7%
CVE-2017-2167 May 12, 18:29 HIGH PATCH This Week

Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Primedrive Desktop Application Softbank
NVD
CVSS 3.0
7.8
EPSS
0.6%
CVE-2017-2108 Apr 28, 16:59 HIGH This Week

Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Primedrive Desktop Application Softbank
NVD
CVSS 3.0
7.8
EPSS
0.5%
CVE-2013-2310 Jun 17, 03:29 LOW Monitor

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Samsung Microsoft Wi Fi Spot Configuration Software +11
NVD
CVSS 2.0
3.3
EPSS
0.2%
EPSS 0% CVSS 5.4
MEDIUM This Month

KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Google Apple +3
NVD
EPSS 1% CVSS 8.8
HIGH This Week

Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Optical Bb Unit E Wmta Firmware Softbank
NVD
EPSS 1% CVSS 5.9
MEDIUM PATCH This Month

Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Google Apple +3
NVD
EPSS 1% CVSS 7.8
HIGH PATCH This Week

Untrusted search path vulnerability in Installer for PrimeDrive Desktop Application version 1.4.4 and earlier allows remote attackers to execute arbitrary code via a specially crafted executable file. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Primedrive Desktop Application Softbank
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Untrusted search path vulnerability in PrimeDrive Desktop Application 1.4.3 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Primedrive Desktop Application Softbank
NVD
EPSS 0% CVSS 3.3
LOW Monitor

SoftBank Wi-Fi Spot Configuration Software, as used on SoftBank SHARP 3G handsets, SoftBank Panasonic 3G handsets, SoftBank NEC 3G handsets, SoftBank Samsung 3G handsets, SoftBank mobile Wi-Fi. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Google Samsung +13
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy