CVE-2019-5986
Summary
| CVE | CVE-2019-5986 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-09-12 17:15:00 UTC |
| Updated | 2019-09-16 13:22:00 UTC |
| Description | Cross-site request forgery (CSRF) vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to hijack the authentication of administrators via unspecified vectors. |
Risk And Classification
Problem Types: CWE-352
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Ntt-east | Pr-400ki | - | All | All | All |
| Hardware | Ntt-east | Pr-400ki | - | All | All | All |
| Operating System | Ntt-east | Pr-400ki Firmware | All | All | All | All |
| Hardware | Ntt-east | Pr-400mi | - | All | All | All |
| Hardware | Ntt-east | Pr-400mi | - | All | All | All |
| Operating System | Ntt-east | Pr-400mi Firmware | All | All | All | All |
| Hardware | Ntt-east | Pr-400ne | - | All | All | All |
| Hardware | Ntt-east | Pr-400ne | - | All | All | All |
| Operating System | Ntt-east | Pr-400ne Firmware | All | All | All | All |
| Hardware | Ntt-east | Pr-500ki | - | All | All | All |
| Hardware | Ntt-east | Pr-500ki | - | All | All | All |
| Operating System | Ntt-east | Pr-500ki Firmware | All | All | All | All |
| Hardware | Ntt-east | Pr-500mi | - | All | All | All |
| Hardware | Ntt-east | Pr-500mi | - | All | All | All |
| Operating System | Ntt-east | Pr-500mi Firmware | All | All | All | All |
| Hardware | Ntt-east | Pr-s300hi | - | All | All | All |
| Hardware | Ntt-east | Pr-s300hi | - | All | All | All |
| Operating System | Ntt-east | Pr-s300hi Firmware | All | All | All | All |
| Hardware | Ntt-east | Pr-s300ne | - | All | All | All |
| Hardware | Ntt-east | Pr-s300ne | - | All | All | All |
| Operating System | Ntt-east | Pr-s300ne Firmware | All | All | All | All |
| Hardware | Ntt-east | Pr-s300se | - | All | All | All |
| Hardware | Ntt-east | Pr-s300se | - | All | All | All |
| Operating System | Ntt-east | Pr-s300se Firmware | All | All | All | All |
| Hardware | Ntt-east | Rs-500ki | - | All | All | All |
| Hardware | Ntt-east | Rs-500ki | - | All | All | All |
| Operating System | Ntt-east | Rs-500ki Firmware | All | All | All | All |
| Hardware | Ntt-east | Rs-500mi | - | All | All | All |
| Hardware | Ntt-east | Rs-500mi | - | All | All | All |
| Operating System | Ntt-east | Rs-500mi Firmware | All | All | All | All |
| Hardware | Ntt-east | Rt-400ki | - | All | All | All |
| Hardware | Ntt-east | Rt-400ki | - | All | All | All |
| Operating System | Ntt-east | Rt-400ki Firmware | All | All | All | All |
| Hardware | Ntt-east | Rt-400mi | - | All | All | All |
| Hardware | Ntt-east | Rt-400mi | - | All | All | All |
| Operating System | Ntt-east | Rt-400mi Firmware | All | All | All | All |
| Hardware | Ntt-east | Rt-400ne | - | All | All | All |
| Hardware | Ntt-east | Rt-400ne | - | All | All | All |
| Operating System | Ntt-east | Rt-400ne Firmware | All | All | All | All |
| Hardware | Ntt-east | Rt-500ki | - | All | All | All |
| Hardware | Ntt-east | Rt-500ki | - | All | All | All |
| Operating System | Ntt-east | Rt-500ki Firmware | All | All | All | All |
| Hardware | Ntt-east | Rt-500mi | - | All | All | All |
| Hardware | Ntt-east | Rt-500mi | - | All | All | All |
| Operating System | Ntt-east | Rt-500mi Firmware | All | All | All | All |
| Hardware | Ntt-east | Rt-s300hi | - | All | All | All |
| Hardware | Ntt-east | Rt-s300hi | - | All | All | All |
| Operating System | Ntt-east | Rt-s300hi Firmware | All | All | All | All |
| Hardware | Ntt-east | Rt-s300ne | - | All | All | All |
| Hardware | Ntt-east | Rt-s300ne | - | All | All | All |
| Operating System | Ntt-east | Rt-s300ne Firmware | All | All | All | All |
| Hardware | Ntt-east | Rt-s300se | - | All | All | All |
| Hardware | Ntt-east | Rt-s300se | - | All | All | All |
| Operating System | Ntt-east | Rt-s300se Firmware | All | All | All | All |
| Hardware | Ntt-east | Rv-440ki | - | All | All | All |
| Hardware | Ntt-east | Rv-440ki | - | All | All | All |
| Operating System | Ntt-east | Rv-440ki Firmware | All | All | All | All |
| Hardware | Ntt-east | Rv-440mi | - | All | All | All |
| Hardware | Ntt-east | Rv-440mi | - | All | All | All |
| Operating System | Ntt-east | Rv-440mi Firmware | All | All | All | All |
| Hardware | Ntt-east | Rv-440ne | - | All | All | All |
| Hardware | Ntt-east | Rv-440ne | - | All | All | All |
| Operating System | Ntt-east | Rv-440ne Firmware | All | All | All | All |
| Hardware | Ntt-east | Rv-s340hi | - | All | All | All |
| Hardware | Ntt-east | Rv-s340hi | - | All | All | All |
| Operating System | Ntt-east | Rv-s340hi Firmware | All | All | All | All |
| Hardware | Ntt-east | Rv-s340ne | - | All | All | All |
| Hardware | Ntt-east | Rv-s340ne | - | All | All | All |
| Operating System | Ntt-east | Rv-s340ne Firmware | All | All | All | All |
| Hardware | Ntt-east | Rv-s340se | - | All | All | All |
| Hardware | Ntt-east | Rv-s340se | - | All | All | All |
| Operating System | Ntt-east | Rv-s340se Firmware | All | All | All | All |
| Hardware | Ntt-west | Pr-400ki | - | All | All | All |
| Hardware | Ntt-west | Pr-400ki | - | All | All | All |
| Operating System | Ntt-west | Pr-400ki Firmware | All | All | All | All |
| Hardware | Ntt-west | Pr-400mi | - | All | All | All |
| Hardware | Ntt-west | Pr-400mi | - | All | All | All |
| Operating System | Ntt-west | Pr-400mi Firmware | All | All | All | All |
| Hardware | Ntt-west | Pr-400ne | - | All | All | All |
| Hardware | Ntt-west | Pr-400ne | - | All | All | All |
| Operating System | Ntt-west | Pr-400ne Firmware | All | All | All | All |
| Hardware | Ntt-west | Pr-500ki | - | All | All | All |
| Hardware | Ntt-west | Pr-500ki | - | All | All | All |
| Operating System | Ntt-west | Pr-500ki Firmware | All | All | All | All |
| Hardware | Ntt-west | Pr-500mi | - | All | All | All |
| Hardware | Ntt-west | Pr-500mi | - | All | All | All |
| Operating System | Ntt-west | Pr-500mi Firmware | All | All | All | All |
| Hardware | Ntt-west | Pr-s300hi | - | All | All | All |
| Hardware | Ntt-west | Pr-s300hi | - | All | All | All |
| Operating System | Ntt-west | Pr-s300hi Firmware | All | All | All | All |
| Hardware | Ntt-west | Pr-s300ne | - | All | All | All |
| Hardware | Ntt-west | Pr-s300ne | - | All | All | All |
| Operating System | Ntt-west | Pr-s300ne Firmware | All | All | All | All |
| Hardware | Ntt-west | Pr-s300se | - | All | All | All |
| Hardware | Ntt-west | Pr-s300se | - | All | All | All |
| Operating System | Ntt-west | Pr-s300se Firmware | All | All | All | All |
| Hardware | Ntt-west | Rt-400ki | - | All | All | All |
| Hardware | Ntt-west | Rt-400ki | - | All | All | All |
| Operating System | Ntt-west | Rt-400ki Firmware | All | All | All | All |
| Hardware | Ntt-west | Rt-400mi | - | All | All | All |
| Hardware | Ntt-west | Rt-400mi | - | All | All | All |
| Operating System | Ntt-west | Rt-400mi Firmware | All | All | All | All |
| Hardware | Ntt-west | Rt-400ne | - | All | All | All |
| Hardware | Ntt-west | Rt-400ne | - | All | All | All |
| Operating System | Ntt-west | Rt-400ne Firmware | All | All | All | All |
| Hardware | Ntt-west | Rt-500ki | - | All | All | All |
| Hardware | Ntt-west | Rt-500ki | - | All | All | All |
| Operating System | Ntt-west | Rt-500ki Firmware | All | All | All | All |
| Hardware | Ntt-west | Rt-500mi | - | All | All | All |
| Hardware | Ntt-west | Rt-500mi | - | All | All | All |
| Operating System | Ntt-west | Rt-500mi Firmware | All | All | All | All |
| Hardware | Ntt-west | Rt-s300hi | - | All | All | All |
| Hardware | Ntt-west | Rt-s300hi | - | All | All | All |
| Operating System | Ntt-west | Rt-s300hi Firmware | All | All | All | All |
| Hardware | Ntt-west | Rt-s300ne | - | All | All | All |
| Hardware | Ntt-west | Rt-s300ne | - | All | All | All |
| Operating System | Ntt-west | Rt-s300ne Firmware | All | All | All | All |
| Hardware | Ntt-west | Rt-s300se | - | All | All | All |
| Hardware | Ntt-west | Rt-s300se | - | All | All | All |
| Operating System | Ntt-west | Rt-s300se Firmware | All | All | All | All |
| Hardware | Ntt-west | Rv-440ki | - | All | All | All |
| Hardware | Ntt-west | Rv-440ki | - | All | All | All |
| Operating System | Ntt-west | Rv-440ki Firmware | All | All | All | All |
| Hardware | Ntt-west | Rv-440mi | - | All | All | All |
| Hardware | Ntt-west | Rv-440mi | - | All | All | All |
| Operating System | Ntt-west | Rv-440mi Firmware | All | All | All | All |
| Hardware | Ntt-west | Rv-440ne | - | All | All | All |
| Hardware | Ntt-west | Rv-440ne | - | All | All | All |
| Operating System | Ntt-west | Rv-440ne Firmware | All | All | All | All |
| Hardware | Ntt-west | Rv-s340hi | - | All | All | All |
| Hardware | Ntt-west | Rv-s340hi | - | All | All | All |
| Operating System | Ntt-west | Rv-s340hi Firmware | All | All | All | All |
| Hardware | Ntt-west | Rv-s340ne | - | All | All | All |
| Hardware | Ntt-west | Rv-s340ne | - | All | All | All |
| Operating System | Ntt-west | Rv-s340ne Firmware | All | All | All | All |
| Hardware | Ntt-west | Rv-s340se | - | All | All | All |
| Hardware | Ntt-west | Rv-s340se | - | All | All | All |
| Operating System | Ntt-west | Rv-s340se Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| JVN#43172719: Multiple vulnerabilities in Hikari Denwa router/Home GateWay | MISC | jvn.jp | Third Party Advisory, VDB Entry |
| www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html | CONFIRM | www.ntt-west.co.jp | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.