CVE-2013-3659

The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.11 network's coverage area.

CVSS v2.0 3.3 LOW

3.3^/10

CVSS v2.0 : LOW

Vector : AV:A/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 6.5 / Impact : 2.9

Access Vector ADJACENT_NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://jvn.jp/en/jp/JVN44035194/995312/index.html
http://jvn.jp/en/jp/JVN44035194/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2013-000075
https://exchange.xforce.ibmcloud.com/vulnerabilities/86361
https://play.google.com/store/apps/details?id=com.nttdocomo.android.gs.utility

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nttdocomo:overseas_usage:2.0.0:::::android::
	cpe:2.3:a:nttdocomo:overseas_usage:2.0.4:::::android::

History

No history.

Information

Published : 2013-08-09 19:55

Updated : 2017-08-29 01:33

NVD link : CVE-2013-3659

Mitre link : CVE-2013-3659

CVE.ORG link : CVE-2013-3659

JSON object : View

Products Affected

nttdocomo

overseas_usage

CWE

CWE-287

Improper Authentication

{"id": "CVE-2013-3659", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.3, "accessVector": "ADJACENT_NETWORK", "vectorString": "AV:A/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.5, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-08-09T19:55:07.207", "references": [{"url": "http://jvn.jp/en/jp/JVN44035194/995312/index.html", "source": "vultures@jpcert.or.jp"}, {"url": "http://jvn.jp/en/jp/JVN44035194/index.html", "source": "vultures@jpcert.or.jp"}, {"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000075", "source": "vultures@jpcert.or.jp"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/86361", "source": "vultures@jpcert.or.jp"}, {"url": "https://play.google.com/store/apps/details?id=com.nttdocomo.android.gs.utility", "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.11 network's coverage area."}, {"lang": "es", "value": "El NTT DOCOMO usado en aplicaciones en el exterior v2.0.0 hasta v2.0.4 para Android no se conecta correctamente a puntos de acceso Wi-Fi, lo que permite a atacantes remotos obtener informaci\u00f3n sensible mediante el aprovechamiento de presencia en la zona de cobertura de una red 802.11"}], "lastModified": "2017-08-29T01:33:25.717", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nttdocomo:overseas_usage:2.0.0:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "8B30CA2B-C452-411A-BF31-CB83C426C979"}, {"criteria": "cpe:2.3:a:nttdocomo:overseas_usage:2.0.4:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "FCE7E52F-387D-4B7A-9522-FDD0CDF35E81"}], "operator": "OR"}]}], "sourceIdentifier": "vultures@jpcert.or.jp"}