Rakuten Mobile Rakuten Casa Access Control Error Vulnerability (CNVD-2022-77811)

Rakuten Mobile Rakuten Casa is a small base station from Rakuten Mobile Japan, Inc. It is used to improve the radio wave conditions of users.An access control error vulnerability exists in Rakuten Mobile Rakuten Casa AP_F_V2_0_0 version and AP_F_V1_4_1 version, which stems from improper access restrictions. A remote attacker could bypass the implemented security restrictions and gain unauthorized access to sensitive information on the system. An attacker could use the vulnerability to gain unauthorized access to other restricted functions by a remote attacker.