Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative user to embed arbitrary scripts to the configuration data through a certain form field of the configuration page, which may be executed on another administrative user's web browser. This is a different vulnerability from CVE-2018-0666.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Yamaha Broadband VoIP Router RT57i
Vendor
Yamaha Corporation
Product
Yamaha Broadband VoIP Router RT57i
Platforms
Unknown
Default status
Unknown
Yamaha Broadband VoIP Router RT57i · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Rev.8.00.95 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Yamaha Broadband VoIP Router RT58i
Vendor
Yamaha Corporation
Product
Yamaha Broadband VoIP Router RT58i
Platforms
Unknown
Default status
Unknown
Yamaha Broadband VoIP Router RT58i · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Rev.9.01.51 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Yamaha Broadband VoIP Router NVR500
Vendor
Yamaha Corporation
Product
Yamaha Broadband VoIP Router NVR500
Platforms
Unknown
Default status
Unknown
Yamaha Broadband VoIP Router NVR500 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Rev.11.00.36 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Yamaha Gigabit VPN Router RTX810
Vendor
Yamaha Corporation
Product
Yamaha Gigabit VPN Router RTX810
Platforms
Unknown
Default status
Unknown
Yamaha Gigabit VPN Router RTX810 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Rev.11.01.31 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Yamaha Firewall FWX120
Vendor
Yamaha Corporation
Product
Yamaha Firewall FWX120
Platforms
Unknown
Default status
Unknown
Yamaha Firewall FWX120 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
Rev.11.03.25 and earlier
affected
Unavailable
Unavailable
Unavailable
None listed
Biz Box Router N58i, N500, NVR500, and RTX810
Vendor
NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION
Product
Biz Box Router N58i, N500, NVR500, and RTX810
Platforms
Unknown
Default status
Unknown
Biz Box Router N58i, N500, NVR500, and RTX810 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
n/a
affected
Unavailable
Unavailable
Unavailable
None listed
Biz Box Router N58i, and N500
Vendor
NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
Product
Biz Box Router N58i, and N500
Platforms
Unknown
Default status
Unknown
Biz Box Router N58i, and N500 · Scoped product and version facts