Rakuten Mobile Inc Rakuten Turbo 5G vulnerabilities

CVE-2024-48895 [HIGH] CWE-78 CVE-2024-48895: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exi Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote authenticated attacker may execute an arbitrary OS command.

CVE-2024-47865 [MEDIUM] CWE-306 CVE-2024-47865: Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware versi Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may update or downgrade the firmware on the device.

CVE-2024-52033 [MEDIUM] CWE-497 CVE-2024-52033: Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten T Exposure of sensitive system information to an unauthorized control sphere issue exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerability is exploited, a remote unauthenticated attacker may obtain information of the other devices connected through the Wi-Fi.