Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Rakuten Mobile, Inc. Component: Casa Clear all filters
TI-2022-11984 CVE-2022-29525 · GHSA-p4rr-qwvg-x2jf

Hard-coded credentials in Rakuten Casa

Priority MEDIUM 45

Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0156 Published 2022-06-13 No fix listed CWE-798
TI-2022-11346 CVE-2022-28704 · GHSA-373m-8w83-9jwp

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0…

Priority LOW 37

Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to log in with the root privilege and perform an arbitrary operation if the product is in its default sett…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02754 Published 2022-06-13 No fix listed