Security readout for executives and security teams
Plain-English summary
CVE-2017-10845 is a backdoor-account issue in NTT DOCOMO Wi-Fi STATION L-02F software V10g and earlier. A remote attacker could access the device with administrative privileges and perform unintended operations. The sources do not provide a CVSS score, exploit details, or confirmed active exploitation.
Executive priority
Treat this as high priority where the affected mobile router is still deployed. Administrative compromise of network equipment can affect connectivity and trust boundaries, but urgency depends on whether these legacy devices remain in use.
Technical view
The vulnerability is categorized as CWE-255 and affects Wi-Fi STATION L-02F software version V10g and earlier. The described impact is unauthorized administrative access via a backdoor account. The bundle does not state authentication prerequisites, attack surface details, fixed version, or compensating controls.
Likely exposure
Exposure appears limited to organizations or users still operating NTT DOCOMO Wi-Fi STATION L-02F devices on V10g or earlier. The source bundle does not identify other products, CPEs, deployment conditions, or whether internet exposure is required.
Exploitation context
The CVE is not listed as CISA KEV in the provided data. The public descriptions say remote attackers can gain administrative privileges, but the bundle does not provide exploit maturity, observed exploitation, proof-of-concept status, or attacker prerequisites.
Researcher notes
The evidence is sparse: no CVSS vector, no named fixed version, and no exploitation confirmation are included. Analysis should stay scoped to Wi-Fi STATION L-02F V10g and earlier unless vendor advisories provide broader product impact.
Mitigation direction
- Inventory Wi-Fi STATION L-02F devices and record installed software versions.
- Check NTT DOCOMO and JVN guidance for the supported remediation path.
- Upgrade beyond affected versions if a vendor-supported fixed release is available.
- Limit device administration exposure while remediation is being confirmed.
Validation and detection
- Confirm whether any Wi-Fi STATION L-02F runs software V10g or earlier.
- Verify vendor guidance against the exact device model and software version.
- Review device settings for unexpected administrative changes.
- Confirm management access is limited to trusted administrative networks.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-255: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2017-10845 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://www.nttdocomo.co.jp/info/notice/page/170710_01_m.htmlCVE reference · x_refsource_MISC
- JVN#68922465CVE reference · third-party-advisory, x_refsource_JVN
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Credentials Management Errors
Credentials Management Errors represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.