SoftBank Wi-Fi Spot Configuration Software CVE-2013-2310 Information Disclosure Vulnerability

Bugtraq ID:	60009
Class:	Design Error
CVE:	CVE-2013-2310
Remote:	Yes
Local:	No
Published:	May 20 2013 12:00AM
Updated:	May 20 2013 12:00AM
Credit:	Masashi Sakai
Vulnerable:
Not Vulnerable:

SoftBank Wi-Fi Spot Configuration Software CVE-2013-2310 Information Disclosure Vulnerability

SoftBank Wi-Fi Spot Configuration Software is prone to an information-disclosure vulnerability.

Successful exploits will allow attackers to obtain sensitive information by performing man-in-the-middle attacks. This may aid in further attacks.

SoftBank Wi-Fi Spot Configuration Software CVE-2013-2310 Information Disclosure Vulnerability

An attacker can exploit this issue using readily available tools.

SoftBank Wi-Fi Spot Configuration Software CVE-2013-2310 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

SoftBank Wi-Fi Spot Configuration Software CVE-2013-2310 Information Disclosure Vulnerability

References:

• Vendor Homepage (SoftBank)
  
• Wi-Fi Spot Configuration Software vulnerability in the connection process (JPCERT)