All the vulnerabilites related to NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION - RS-500MI
jvndb-2019-000043
Vulnerability from jvndb
Published
2019-06-27 15:36
Modified
2019-10-08 17:22
Severity ?
Summary
Multiple vulnerabilities in Hikari Denwa router/Home GateWay
Details
Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains multiple vulnerabilities listed below.
* Cross-site Scripting (CWE-79) - CVE-2019-5985
* Cross-site Request Forgery (CWE-352) - CVE-2019-5986
Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
▼ | Type | URL |
---|---|---|
JVN | https://jvn.jp/en/jp/JVN43172719/index.html | |
CVE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5985 | |
CVE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5986 | |
NVD | https://nvd.nist.gov/vuln/detail/CVE-2019-5985 | |
NVD | https://nvd.nist.gov/vuln/detail/CVE-2019-5986 | |
Cross-Site Request Forgery(CWE-352) | https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html | |
Cross-site Scripting(CWE-79) | https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html |
Impacted products
{ "@rdf:about": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000043.html", "dc:date": "2019-10-08T17:22+09:00", "dcterms:issued": "2019-06-27T15:36+09:00", "dcterms:modified": "2019-10-08T17:22+09:00", "description": "Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION and NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains multiple vulnerabilities listed below.\r\n\r\n* Cross-site Scripting (CWE-79) - CVE-2019-5985\r\n* Cross-site Request Forgery (CWE-352) - CVE-2019-5986\r\n\r\nToshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.", "link": "https://jvndb.jvn.jp/en/contents/2019/JVNDB-2019-000043.html", "sec:cpe": [ { "#text": "cpe:/h:ntt_east:pr-400ki", "@product": "PR-400KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:pr-400mi", "@product": "PR-400MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:pr-400ne", "@product": "PR-400NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:pr-500ki", "@product": "PR-500KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:pr-500mi", "@product": "PR-500MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:pr-s300hi", "@product": "PR-S300HI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:pr-s300ne", "@product": "PR-S300NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:pr-s300se", "@product": "PR-S300SE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rs-500ki", "@product": "RS-500KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rs-500mi", "@product": "RS-500MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-400ki", "@product": "RT-400KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-400mi", "@product": "RT-400MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-400ne", "@product": "RT-400NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-500ki", "@product": "RT-500KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-500mi", "@product": "RT-500MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-s300hi", "@product": "RT-S300HI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-s300ne", "@product": "RT-S300NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-s300se", "@product": "RT-S300SE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rv-440ki", "@product": "RV-440KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rv-440mi", "@product": "RV-440MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rv-440ne", "@product": "RV-440NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rv-s340hi", "@product": "RV-S340HI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rv-s340ne", "@product": "RV-S340NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rv-s340se", "@product": "RV-S340SE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:pr-400ki", "@product": "PR-400KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:pr-400mi", "@product": "PR-400MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:pr-400ne", "@product": "PR-400NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:pr-500ki", "@product": "PR-500KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:pr-500mi", "@product": "PR-500MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:pr-s300hi", "@product": "PR-S300HI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:pr-s300ne", "@product": "PR-S300NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:pr-s300se", "@product": "PR-S300SE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rt-400ki", "@product": "RT-400KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rt-400mi", "@product": "RT-400MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rt-400ne", "@product": "RT-400NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rt-500ki", "@product": "RT-500KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rt-500mi", "@product": "RT-500MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rt-s300hi", "@product": "RT-S300HI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rt-s300ne", "@product": "RT-S300NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rt-s300se", "@product": "RT-S300SE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rv-440ki", "@product": "RV-440KI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rv-440mi", "@product": "RV-440MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rv-440ne", "@product": "RV-440NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rv-s340hi", "@product": "RV-S340HI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rv-s340ne", "@product": "RV-S340NE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_west:rv-s340se", "@product": "RV-S340SE", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION", "@version": "2.2" } ], "sec:cvss": [ { "@score": "4.3", "@severity": "Medium", "@type": "Base", "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "@version": "2.0" }, { "@score": "6.1", "@severity": "Medium", "@type": "Base", "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "@version": "3.0" } ], "sec:identifier": "JVNDB-2019-000043", "sec:references": [ { "#text": "https://jvn.jp/en/jp/JVN43172719/index.html", "@id": "JVN#43172719", "@source": "JVN" }, { "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5985", "@id": "CVE-2019-5985", "@source": "CVE" }, { "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-5986", "@id": "CVE-2019-5986", "@source": "CVE" }, { "#text": "https://nvd.nist.gov/vuln/detail/CVE-2019-5985", "@id": "CVE-2019-5985", "@source": "NVD" }, { "#text": "https://nvd.nist.gov/vuln/detail/CVE-2019-5986", "@id": "CVE-2019-5986", "@source": "NVD" }, { "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html", "@id": "CWE-352", "@title": "Cross-Site Request Forgery(CWE-352)" }, { "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html", "@id": "CWE-79", "@title": "Cross-site Scripting(CWE-79)" } ], "title": "Multiple vulnerabilities in Hikari Denwa router/Home GateWay" }
jvndb-2024-000102
Vulnerability from jvndb
Published
2024-09-24 16:00
Modified
2024-10-18 11:02
Severity ?
Summary
Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions
Details
Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION fail to restrict access permissions (CWE-451).
Keishi Awata of logicalmixed reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
▼ | Type | URL |
---|---|---|
JVN | https://jvn.jp/en/jp/JVN78356367/index.html | |
CVE | https://www.cve.org/CVERecord?id=CVE-2024-47044 | |
No Mapping(CWE-Other) | https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html |
Impacted products
{ "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000102.html", "dc:date": "2024-10-18T11:02+09:00", "dcterms:issued": "2024-09-24T16:00+09:00", "dcterms:modified": "2024-10-18T11:02+09:00", "description": "Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION fail to restrict access permissions (CWE-451).\r\n\r\nKeishi Awata of logicalmixed reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.", "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000102.html", "sec:cpe": [ { "#text": "cpe:/h:ntt_east:pr-500mi", "@product": "PR-500MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rs-500mi", "@product": "RS-500MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/h:ntt_east:rt-500mi", "@product": "RT-500MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/o:ntt_east:pr-400mi_firmware", "@product": "PR-400MI firmware", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/o:ntt_east:pr-600mi", "@product": "PR-600MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/o:ntt_east:rt-400mi_firmware", "@product": "RT-400MI firmware", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/o:ntt_east:rv-440mi_firmware", "@product": "RV-440MI firmware", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" }, { "#text": "cpe:/o:ntt_east:rx-600mi", "@product": "RX-600MI", "@vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION", "@version": "2.2" } ], "sec:cvss": { "@score": "5.3", "@severity": "Medium", "@type": "Base", "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "@version": "3.0" }, "sec:identifier": "JVNDB-2024-000102", "sec:references": [ { "#text": "https://jvn.jp/en/jp/JVN78356367/index.html", "@id": "JVN#78356367", "@source": "JVN" }, { "#text": "https://www.cve.org/CVERecord?id=CVE-2024-47044", "@id": "CVE-2024-47044", "@source": "CVE" }, { "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html", "@id": "CWE-Other", "@title": "No Mapping(CWE-Other)" } ], "title": "Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions" }