Lucene search

Japan Vulnerability NotesJVN:45034304

HistoryJun 27, 2016 - 12:00 a.m.

JVN#45034304: Multiple Hikari Denwa routers vulnerable to cross-site request forgery

2016-06-2700:00:00

Japan Vulnerability Notes

jvn.jp

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.8%

JSON

Multiple Hikari Denwa routers contain a cross-site request forgery vulnerability (CWE-352).

Impact

If a user views a malicious page while logged in, unintended operations may be performed.

Solution

Update the Firmware
Apply the appropriate firmware update provided by the developer.

Products Affected

NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION

PR-400MI firmware Ver. 07.00.1006 and earlier
RV-440MI firmware Ver. 07.00.1006 and earlier
RT-400MI firmware Ver. 07.00.1006 and earlier
NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION
PR-400MI firmware Ver. 07.00.1005 and earlier
RV-440MI firmware Ver. 07.00.1005 and earlier
RT-400MI firmware Ver. 07.00.1005 and earlier

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

46.8%

JSON

Related for JVN:45034304