CVEvulnerability

CVE-2019-5985

6.1 MEDIUM Published 2019-09-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-09-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-79

Description

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

• ntt-east pr-s300ne firmware (<= 19.41) • ntt-east rt-s300ne firmware (<= 19.41) • ntt-east rv-s340ne firmware (<= 19.41) • ntt-east pr-s300hi firmware (<= 19.01.0005) • ntt-east rt-s300hi firmware (<= 19.01.0005) • ntt-east rv-s340hi firmware (<= 19.01.0005) • ntt-east pr-s300se firmware (<= 19.40) • ntt-east rt-s300se firmware (<= 19.40) • ntt-east rv-s340se firmware (<= 19.40) • ntt-east pr-400ne firmware (<= 7.42) • ntt-east rt-400ne firmware (<= 7.42) • ntt-east rv-440ne firmware (<= 7.42) • ntt-east pr-400ki firmware (<= 07.00.1010) • ntt-east rt-400ki firmware (<= 07.00.1010) • ntt-east rv-440ki firmware (<= 07.00.1010) • ntt-east pr-400mi firmware (<= 07.00.1012) • ntt-east rt-400mi firmware (<= 07.00.1012) • ntt-east rv-440mi firmware (<= 07.00.1012) • ntt-east pr-500ki firmware (<= 01.00.0090) • ntt-east rt-500ki firmware (<= 01.00.0090) • ntt-east rs-500ki firmware (<= 01.00.0070) • ntt-east pr-500mi firmware (<= 01.01.0014) • ntt-east rt-500mi firmware (<= 01.01.0014) • ntt-east rs-500mi firmware (<= 03.01.0019) • ntt-west pr-s300ne firmware (<= 19.41) • ntt-west rt-s300ne firmware (<= 19.41) • ntt-west rv-s340ne firmware (<= 19.41) • ntt-west pr-s300hi firmware (<= 19.01.0005) • ntt-west rt-s300hi firmware (<= 19.01.0005) • ntt-west rv-s340hi firmware (<= 19.01.0005) • ntt-west pr-s300se firmware (<= 19.40) • ntt-west rt-s300se firmware (<= 19.40) • ntt-west rv-s340se firmware (<= 19.40) • ntt-west pr-400ne firmware (<= 7.42) • ntt-west rt-400ne firmware (<= 7.42) • ntt-west rv-440ne firmware (<= 7.42) • ntt-west pr-400ki firmware (<= 07.00.1010) • ntt-west rt-400ki firmware (<= 07.00.1010) • ntt-west rv-440ki firmware (<= 07.00.1010) • ntt-west pr-400mi firmware (<= 07.00.1012) • ntt-west rt-400mi firmware (<= 07.00.1012) • ntt-west rv-440mi firmware (<= 07.00.1012) • ntt-west pr-500ki firmware (<= 01.00.0090) • ntt-west rt-500ki firmware (<= 01.00.0090) • ntt-west pr-500mi firmware (<= 01.01.0011) • ntt-west rt-500mi firmware (<= 01.01.0011)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References