Back to Database
Status published
High
CVE-2022-26834
Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or...
Vulnerability Description
Improper access control vulnerability in Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 allows a remote attacker to obtain the information stored in the product because the product is set to accept HTTP connections from the WAN side by default.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-26834
Credits & Attribution
No credits recorded in the NVD database.
References
More from Rakuten Mobile, Inc.
View All →CVE-2024-52033
Exposure of sensitive system information to an unauthorized control sphere...
Medium
5.3
CVE-2024-48895
Improper neutralization of special elements used in an OS command...
High
8.8
CVE-2024-47865
Missing authentication for critical function vulnerability exists in Rakuten Turbo...
Medium
5.3
CVE-2023-40282
Improper authentication vulnerability in Rakuten WiFi Pocket all versions allows...
Unknown
0
CVE-2022-29525
Rakuten Casa version AP_F_V1_4_1 or AP_F_V2_0_0 uses a hard-coded credential...
Critical
9.8
Affected Vendor
Rakuten Mobile, Inc.
View all reports →Affected Software
Rakuten Casa
Vulnerable Versions:
version AP_F_V1_4_1 or AP_F_V2_0_0
Timeline
Official Publish:
June 13th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.