Search
Find a vulnerability
Search criteria
6 vulnerabilities by ntt-east
CVE-2024-47044 (GCVE-0-2024-47044)
Vulnerability from nvd – Published: 2024-09-26 08:34 – Updated: 2024-10-17 01:33
VLAI
EPSS
VEX
Summary
Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-26 18:32 UTC
CWE
- CWE-451 - User interface (UI) misrepresentation of critical information
Assigner
References
7 references
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Hikari Denwa router RT-400MI |
Affected:
Ver.09.00.0015 and earlier
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Hikari Denwa router PR-400MI |
Affected:
Ver.09.00.0015 and earlier
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Hikari Denwa router RV-440MI |
Affected:
Ver.09.00.0015 and earlier
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Home GateWay/Hikari Denwa router PR-500MI/RS-500MI/RT-500MI |
Affected:
Ver.08.00.0004 and earlier
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Home GateWay/Hikari Denwa router PR-600MI/RX-600MI |
Affected:
Ver.01.00.0008 and earlier
|
|
| ntt-east | rv-440mi_firmware |
Affected:
0 , ≤ 09.00.0015
(custom)
cpe:2.3:o:ntt-east:pr-400mi_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rt-400mi_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rv-440mi_firmware:-:*:*:*:*:*:*:* |
|
| ntt-east | rt-500mi_firmware |
Affected:
0 , ≤ 08.00.0004
(custom)
cpe:2.3:o:ntt-east:pr-500mi_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rs-500mi_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rt-500mi_firmware:-:*:*:*:*:*:*:* |
|
| ntt-east | rx-600mi_firmware |
Affected:
0 , ≤ 01.00.0008
(custom)
cpe:2.3:o:ntt-east:pr-600mi_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rx-600mi_firmware:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:ntt-east:pr-400mi_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rt-400mi_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rv-440mi_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "rv-440mi_firmware",
"vendor": "ntt-east",
"versions": [
{
"lessThanOrEqual": "09.00.0015",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:ntt-east:pr-500mi_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rs-500mi_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rt-500mi_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "rt-500mi_firmware",
"vendor": "ntt-east",
"versions": [
{
"lessThanOrEqual": "08.00.0004",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:ntt-east:pr-600mi_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rx-600mi_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "rx-600mi_firmware",
"vendor": "ntt-east",
"versions": [
{
"lessThanOrEqual": "01.00.0008",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-47044",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-26T18:32:49.475278Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-26T18:42:16.913Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Hikari Denwa router RT-400MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.09.00.0015 and earlier"
}
]
},
{
"product": "Hikari Denwa router PR-400MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.09.00.0015 and earlier"
}
]
},
{
"product": "Hikari Denwa router RV-440MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.09.00.0015 and earlier"
}
]
},
{
"product": "Home GateWay/Hikari Denwa router PR-500MI/RS-500MI/RT-500MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.08.00.0004 and earlier"
}
]
},
{
"product": "Home GateWay/Hikari Denwa router PR-600MI/RX-600MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.01.00.0008 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product\u0027s Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-451",
"description": "User interface (UI) misrepresentation of critical information",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-17T01:33:49.083Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://web116.jp/ced/support/news/contents/2024/20240930.html"
},
{
"url": "https://web116.jp/ced/support/version/broadband/rt_400mi/"
},
{
"url": "https://web116.jp/ced/support/version/broadband/pr_400mi/"
},
{
"url": "https://web116.jp/ced/support/version/broadband/rv_440mi/"
},
{
"url": "https://web116.jp/ced/support/version/broadband/500mi/"
},
{
"url": "https://web116.jp/ced/support/version/broadband/600mi/"
},
{
"url": "https://jvn.jp/en/jp/JVN78356367/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-47044",
"datePublished": "2024-09-26T08:34:30.347Z",
"dateReserved": "2024-09-17T04:53:47.412Z",
"dateUpdated": "2024-10-17T01:33:49.083Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-0563 (GCVE-0-2018-0563)
Vulnerability from nvd – Published: 2018-06-26 14:00 – Updated: 2024-08-05 03:28
VLAI
EPSS
VEX
Summary
Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Severity
No CVSS data available.
CWE
- Untrusted search path vulnerability
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://flets.com/customer/next/sec/setup/esat_in… | x_refsource_MISC |
| https://flets.com/customer/tec/fvc/setup/esat_ins… | x_refsource_MISC |
| http://jvn.jp/en/jp/JVN20040004/index.html | third-party-advisoryx_refsource_JVN |
Impacted products
Date Public
2018-06-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:28:11.135Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://flets.com/customer/next/sec/setup/esat_install.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://flets.com/customer/tec/fvc/setup/esat_install.html"
},
{
"name": "JVN#20040004",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN20040004/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "the installer of FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.13.0 and earlier versions and FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.13.0 and earlier versions",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
}
],
"datePublic": "2018-06-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in the installer of FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.13.0 and earlier versions and FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Untrusted search path vulnerability",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-26T13:57:01.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://flets.com/customer/next/sec/setup/esat_install.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://flets.com/customer/tec/fvc/setup/esat_install.html"
},
{
"name": "JVN#20040004",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN20040004/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2018-0563",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "the installer of FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.13.0 and earlier versions and FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.13.0 and earlier versions",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
}
]
},
"vendor_name": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability in the installer of FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.13.0 and earlier versions and FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://flets.com/customer/next/sec/setup/esat_install.html",
"refsource": "MISC",
"url": "https://flets.com/customer/next/sec/setup/esat_install.html"
},
{
"name": "https://flets.com/customer/tec/fvc/setup/esat_install.html",
"refsource": "MISC",
"url": "https://flets.com/customer/tec/fvc/setup/esat_install.html"
},
{
"name": "JVN#20040004",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN20040004/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2018-0563",
"datePublished": "2018-06-26T14:00:00.000Z",
"dateReserved": "2017-11-27T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:28:11.135Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-0507 (GCVE-0-2018-0507)
Vulnerability from nvd – Published: 2018-01-26 16:00 – Updated: 2024-08-05 03:28
VLAI
EPSS
VEX
Summary
Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Severity
No CVSS data available.
CWE
- Untrusted search path vulnerability
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://jvn.jp/en/jp/JVN26255241/index.html | third-party-advisoryx_refsource_JVN |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | FLET'S VIRUS CLEAR Easy Setup & Application Tool |
Affected:
ver.11 and earlier versions
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool |
Affected:
ver.11 and earlier versions
|
Date Public
2018-01-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:28:10.680Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "JVN#26255241",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN26255241/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "ver.11 and earlier versions"
}
]
},
{
"product": "FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "ver.11 and earlier versions"
}
]
}
],
"datePublic": "2018-01-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.11 and earlier versions, FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Untrusted search path vulnerability",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-26T15:57:01.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"name": "JVN#26255241",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "https://jvn.jp/en/jp/JVN26255241/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2018-0507",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool",
"version": {
"version_data": [
{
"version_value": "ver.11 and earlier versions"
}
]
}
},
{
"product_name": "FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool",
"version": {
"version_data": [
{
"version_value": "ver.11 and earlier versions"
}
]
}
}
]
},
"vendor_name": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability in FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.11 and earlier versions, FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "JVN#26255241",
"refsource": "JVN",
"url": "https://jvn.jp/en/jp/JVN26255241/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2018-0507",
"datePublished": "2018-01-26T16:00:00.000Z",
"dateReserved": "2017-11-27T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:28:10.680Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-47044 (GCVE-0-2024-47044)
Vulnerability from cvelistv5 – Published: 2024-09-26 08:34 – Updated: 2024-10-17 01:33
VLAI
EPSS
VEX
Summary
Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas.
Severity
5.3 (Medium)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-26 18:32 UTC
CWE
- CWE-451 - User interface (UI) misrepresentation of critical information
Assigner
References
7 references
Impacted products
8 products
| Vendor | Product | Version | |
|---|---|---|---|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Hikari Denwa router RT-400MI |
Affected:
Ver.09.00.0015 and earlier
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Hikari Denwa router PR-400MI |
Affected:
Ver.09.00.0015 and earlier
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Hikari Denwa router RV-440MI |
Affected:
Ver.09.00.0015 and earlier
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Home GateWay/Hikari Denwa router PR-500MI/RS-500MI/RT-500MI |
Affected:
Ver.08.00.0004 and earlier
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | Home GateWay/Hikari Denwa router PR-600MI/RX-600MI |
Affected:
Ver.01.00.0008 and earlier
|
|
| ntt-east | rv-440mi_firmware |
Affected:
0 , ≤ 09.00.0015
(custom)
cpe:2.3:o:ntt-east:pr-400mi_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rt-400mi_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rv-440mi_firmware:-:*:*:*:*:*:*:* |
|
| ntt-east | rt-500mi_firmware |
Affected:
0 , ≤ 08.00.0004
(custom)
cpe:2.3:o:ntt-east:pr-500mi_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rs-500mi_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rt-500mi_firmware:-:*:*:*:*:*:*:* |
|
| ntt-east | rx-600mi_firmware |
Affected:
0 , ≤ 01.00.0008
(custom)
cpe:2.3:o:ntt-east:pr-600mi_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:ntt-east:rx-600mi_firmware:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:o:ntt-east:pr-400mi_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rt-400mi_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rv-440mi_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "rv-440mi_firmware",
"vendor": "ntt-east",
"versions": [
{
"lessThanOrEqual": "09.00.0015",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:ntt-east:pr-500mi_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rs-500mi_firmware:-:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rt-500mi_firmware:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "rt-500mi_firmware",
"vendor": "ntt-east",
"versions": [
{
"lessThanOrEqual": "08.00.0004",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:o:ntt-east:pr-600mi_firmware:*:*:*:*:*:*:*:*",
"cpe:2.3:o:ntt-east:rx-600mi_firmware:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "rx-600mi_firmware",
"vendor": "ntt-east",
"versions": [
{
"lessThanOrEqual": "01.00.0008",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-47044",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-26T18:32:49.475278Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-09-26T18:42:16.913Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Hikari Denwa router RT-400MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.09.00.0015 and earlier"
}
]
},
{
"product": "Hikari Denwa router PR-400MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.09.00.0015 and earlier"
}
]
},
{
"product": "Hikari Denwa router RV-440MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.09.00.0015 and earlier"
}
]
},
{
"product": "Home GateWay/Hikari Denwa router PR-500MI/RS-500MI/RT-500MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.08.00.0004 and earlier"
}
]
},
{
"product": "Home GateWay/Hikari Denwa router PR-600MI/RX-600MI",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "Ver.01.00.0008 and earlier"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product\u0027s Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-451",
"description": "User interface (UI) misrepresentation of critical information",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-10-17T01:33:49.083Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://web116.jp/ced/support/news/contents/2024/20240930.html"
},
{
"url": "https://web116.jp/ced/support/version/broadband/rt_400mi/"
},
{
"url": "https://web116.jp/ced/support/version/broadband/pr_400mi/"
},
{
"url": "https://web116.jp/ced/support/version/broadband/rv_440mi/"
},
{
"url": "https://web116.jp/ced/support/version/broadband/500mi/"
},
{
"url": "https://web116.jp/ced/support/version/broadband/600mi/"
},
{
"url": "https://jvn.jp/en/jp/JVN78356367/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-47044",
"datePublished": "2024-09-26T08:34:30.347Z",
"dateReserved": "2024-09-17T04:53:47.412Z",
"dateUpdated": "2024-10-17T01:33:49.083Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-0563 (GCVE-0-2018-0563)
Vulnerability from cvelistv5 – Published: 2018-06-26 14:00 – Updated: 2024-08-05 03:28
VLAI
EPSS
VEX
Summary
Untrusted search path vulnerability in the installer of FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.13.0 and earlier versions and FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Severity
No CVSS data available.
CWE
- Untrusted search path vulnerability
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://flets.com/customer/next/sec/setup/esat_in… | x_refsource_MISC |
| https://flets.com/customer/tec/fvc/setup/esat_ins… | x_refsource_MISC |
| http://jvn.jp/en/jp/JVN20040004/index.html | third-party-advisoryx_refsource_JVN |
Impacted products
Date Public
2018-06-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:28:11.135Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://flets.com/customer/next/sec/setup/esat_install.html"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://flets.com/customer/tec/fvc/setup/esat_install.html"
},
{
"name": "JVN#20040004",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "http://jvn.jp/en/jp/JVN20040004/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "the installer of FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.13.0 and earlier versions and FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.13.0 and earlier versions",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "unspecified"
}
]
}
],
"datePublic": "2018-06-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in the installer of FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.13.0 and earlier versions and FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Untrusted search path vulnerability",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-06-26T13:57:01.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "https://flets.com/customer/next/sec/setup/esat_install.html"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://flets.com/customer/tec/fvc/setup/esat_install.html"
},
{
"name": "JVN#20040004",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "http://jvn.jp/en/jp/JVN20040004/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2018-0563",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "the installer of FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.13.0 and earlier versions and FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.13.0 and earlier versions",
"version": {
"version_data": [
{
"version_value": ""
}
]
}
}
]
},
"vendor_name": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability in the installer of FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.13.0 and earlier versions and FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.13.0 and earlier versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://flets.com/customer/next/sec/setup/esat_install.html",
"refsource": "MISC",
"url": "https://flets.com/customer/next/sec/setup/esat_install.html"
},
{
"name": "https://flets.com/customer/tec/fvc/setup/esat_install.html",
"refsource": "MISC",
"url": "https://flets.com/customer/tec/fvc/setup/esat_install.html"
},
{
"name": "JVN#20040004",
"refsource": "JVN",
"url": "http://jvn.jp/en/jp/JVN20040004/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2018-0563",
"datePublished": "2018-06-26T14:00:00.000Z",
"dateReserved": "2017-11-27T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:28:11.135Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2018-0507 (GCVE-0-2018-0507)
Vulnerability from cvelistv5 – Published: 2018-01-26 16:00 – Updated: 2024-08-05 03:28
VLAI
EPSS
VEX
Summary
Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Severity
No CVSS data available.
CWE
- Untrusted search path vulnerability
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://jvn.jp/en/jp/JVN26255241/index.html | third-party-advisoryx_refsource_JVN |
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | FLET'S VIRUS CLEAR Easy Setup & Application Tool |
Affected:
ver.11 and earlier versions
|
|
| NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION | FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool |
Affected:
ver.11 and earlier versions
|
Date Public
2018-01-26 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T03:28:10.680Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "JVN#26255241",
"tags": [
"third-party-advisory",
"x_refsource_JVN",
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN26255241/index.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "ver.11 and earlier versions"
}
]
},
{
"product": "FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool",
"vendor": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION",
"versions": [
{
"status": "affected",
"version": "ver.11 and earlier versions"
}
]
}
],
"datePublic": "2018-01-26T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Untrusted search path vulnerability in FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.11 and earlier versions, FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Untrusted search path vulnerability",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-26T15:57:01.000Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"name": "JVN#26255241",
"tags": [
"third-party-advisory",
"x_refsource_JVN"
],
"url": "https://jvn.jp/en/jp/JVN26255241/index.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "vultures@jpcert.or.jp",
"ID": "CVE-2018-0507",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool",
"version": {
"version_data": [
{
"version_value": "ver.11 and earlier versions"
}
]
}
},
{
"product_name": "FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool",
"version": {
"version_data": [
{
"version_value": "ver.11 and earlier versions"
}
]
}
}
]
},
"vendor_name": "NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability in FLET\u0027S VIRUS CLEAR Easy Setup \u0026 Application Tool ver.11 and earlier versions, FLET\u0027S VIRUS CLEAR v6 Easy Setup \u0026 Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "Untrusted search path vulnerability"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "JVN#26255241",
"refsource": "JVN",
"url": "https://jvn.jp/en/jp/JVN26255241/index.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2018-0507",
"datePublished": "2018-01-26T16:00:00.000Z",
"dateReserved": "2017-11-27T00:00:00.000Z",
"dateUpdated": "2024-08-05T03:28:10.680Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}