Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: NTT DOCOMO, INC. Clear all filters
TI-2021-04062 CVE-2021-20847 · GHSA-5f3c-9rrr-9rp4

Cross-site scripting in NTT DOCOMO, INC. Wi-Fi STATION SH-52A

Priority LOW 29

Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inje…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00842 Published 2021-12-01 No fix listed CWE-79
TI-2019-04210 CVE-2019-5914 · GHSA-6fwx-49x4-wq33

NULL pointer dereference in NTT DOCOMO, INC. V20 PRO L-01J

Priority LOW 25

V20 PRO L-01J software version L01J20c and L01J20d has a NULL pointer exception flaw that can be used by an attacker to cause the device to crash on the same network range via a specially crafted access point.

CVSS 3.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00475 Published 2019-02-13 No fix listed CWE-476
TI-2017-07969 CVE-2017-10871 · GHSA-3cxq-f8c4-pcq5

Memory corruption in NTT DOCOMO, INC. Wi-Fi STATION L-02F Software

Priority MEDIUM 46

Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to execute arbitrary code via unspecified vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0231 Published 2017-11-13 No fix listed CWE-119
TI-2017-07947 CVE-2017-10846 · GHSA-7j62-wcmj-gv86

Missing authorization in NTT DOCOMO, INC. Wi-Fi STATION L-02F

Priority LOW 36

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01585 Published 2017-09-15 No fix listed CWE-862
TI-2017-07946 CVE-2017-10845 · GHSA-r7g6-x36q-9m6p

Credentials management flaw in NTT DOCOMO, INC. Wi-Fi STATION L-02F

Priority MEDIUM 47

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02846 Published 2017-09-15 No fix listed CWE-255
TI-2017-07913 CVE-2017-10812 · GHSA-jg4p-9m49-xxjq

Untrusted search path in NTT DOCOMO, INC. Photo Collection PC Software

Priority LOW 36

Untrusted search path vulnerability in Photo Collection PC Software Ver.4.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0108 Published 2017-08-28 No fix listed CWE-426
TI-2016-04197 CVE-2016-4854 · GHSA-g8vq-x5xw-vgcm

Cross-site request forgery in NTT DOCOMO, INC. L-04D

Priority MEDIUM 40

Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00977 Published 2017-05-22 No fix listed CWE-352
TI-2014-01546 CVE-2014-1977 · GHSA-jp8v-49ww-8fc7

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and…

Priority LOW 22

The NTT DOCOMO sp mode mail application 6300 and earlier for Android 4.0.x and 6700 and earlier for Android 4.1 through 4.4 uses weak permissions for attachments during processing of incoming e-mail messages, which allow…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00893 Published 2014-03-19 No fix listed CWE-264
TI-2013-03201 CVE-2013-3659 · GHSA-gqfx-f256-7x72

The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not…

Priority LOW 17

The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.1…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.00726 Published 2013-08-09 No fix listed CWE-287