CVE-2016-4811

Published: Jun 19, 2016Modified: May 6, 2026

5.6

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.2 / Impact: 3.4

Source: NVD

Description

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors.

Affected (2)

Products: Ntt Bp: Japan Connected Free Wi Fi

Ntt Bp

1 product

Japan Connected Free Wi Fi

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ntt Bp Japan Connected Free Wi Fi	Version 1.13.0
Ntt Bp Japan Connected Free Wi Fi	Version 1.15.1

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (10)

http://jvn.jp/en/jp/JVN46888319/278948/index.html

Source: vultures@jpcert.or.jp

Vendor Advisory

http://jvn.jp/en/jp/JVN46888319/index.html

Source: vultures@jpcert.or.jp

Vendor Advisory

http://jvndb.jvn.jp/jvndb/JVNDB-2016-000076

Source: vultures@jpcert.or.jp

Vendor Advisory

https://itunes.apple.com/app/japan-connected-free-wi-fi/id810838196

Source: vultures@jpcert.or.jp

https://play.google.com/store/apps/details?id=com.nttbp.jfw

Source: vultures@jpcert.or.jp

http://jvn.jp/en/jp/JVN46888319/278948/index.html