CVE-2024-47865 MEDIUM

CVE-2024-47865

Vendor Rakuten Mobile, Inc.
Product Rakuten Turbo 5G
Weakness CWE-306 · Missing auth
Published November 20, 2024
Last update November 20, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may update or downgrade the firmware on the device.

Key dates

02Disclosure timeline

November 20, 2024 CVE published
November 20, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-26190 Milvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise CVE-2025-15346 wolfSSL Python library `CERT_REQUIRED` mode fails to enforce client certificate requirement CVE-2017-20213 FLIR Thermal Camera F/FC/PT/D Stream 8.0.0.64 Unauthenticated Stream Disclosure CVE-2026-1364 JNC｜IAQS and I6 - Missing Authentication CVE-2020-12500 Pepperl+Fuchs improper authorization affects multiple Comtrol RocketLinx products