CVE-2018-0665

🗓️ 09 Jan 2019 22:00:00Reported by jpcertType

Yamaha routers RT57i, RT58i, NVR500, RTX810 allow arbitrary script execution through configuration pag

Reporter	Title	Published	Views	Family All 8
CNVD	Yamaha Corporation Script Injection Vulnerability in Multiple Products	30 Aug 201800:00	–	cnvd
Cvelist	CVE-2018-0665	9 Jan 201922:00	–	cvelist
EUVD	EUVD-2018-1475	7 Oct 202500:30	–	euvd
Japan Vulnerability Notes	JVN#69967692: Multiple script injection vulnerabilities in multiple Yamaha network devices	29 Aug 201800:00	–	jvn
Japan Vulnerability Notes	Multiple script injection vulnerabilities in multiple Yamaha network devices	29 Aug 201809:01	–	jvn
NVD	CVE-2018-0665	9 Jan 201923:29	–	nvd
Prion	Design/Logic Flaw	9 Jan 201923:29	–	prion
Prion	Design/Logic Flaw	9 Jan 201923:29	–	prion

NVD

Vulners

Node

yamaha rt57i_firmwareRange≤rev.8.00.95

AND

yamaha rt57iMatch-

Node

yamaha rt58i_firmwareRange≤rev.9.01.51

AND

yamaha rt58iMatch-

Node

yamaha nvr500_firmwareRange≤rev.11.00.36

AND

yamaha nvr500Match-

Node

yamaha rtx810_firmwareRange≤rev.11.01.31

AND

yamaha rtx810Match-

[
  {
    "product": "Yamaha Broadband VoIP Router RT57i",
    "vendor": "Yamaha Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Rev.8.00.95 and earlier"
      }
    ]
  },
  {
    "product": "Yamaha Broadband VoIP Router RT58i",
    "vendor": "Yamaha Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Rev.9.01.51 and earlier"
      }
    ]
  },
  {
    "product": "Yamaha Broadband VoIP Router NVR500",
    "vendor": "Yamaha Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Rev.11.00.36 and earlier"
      }
    ]
  },
  {
    "product": "Yamaha Gigabit VPN Router RTX810",
    "vendor": "Yamaha Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Rev.11.01.31 and earlier"
      }
    ]
  },
  {
    "product": "Yamaha Firewall FWX120",
    "vendor": "Yamaha Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Rev.11.03.25 and earlier"
      }
    ]
  },
  {
    "product": "Biz Box Router N58i, N500, NVR500, and RTX810",
    "vendor": "NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  },
  {
    "product": "Biz Box Router N58i, and N500",
    "vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
web116	www.web116.jp/ced/support/news/contents/2018/20180829b.html
flets-w	www.flets-w.com/solution/kiki_info/info/180829.html
jvn	www.jvn.jp/en/jp/JVN69967692/index.html
rtpro	www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN69967692.html

21 Nov 2024 03:38Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25.2

CVSS 36.8

EPSS0.00176