Riskcovery

CVE-2018-0666

State
Published
Severity
Not scored
Published
Jan 9, 2019
Updated
Aug 5, 2024
Reserved
Nov 27, 2017

Read the record on cve.org

Description

Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative user to embed arbitrary scripts to the configuration data through a certain form field of the configuration page, which may be executed on another administrative user's web browser. This is a different vulnerability from CVE-2018-0665.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Yamaha Broadband VoIP Router RT57iYamaha Corporation
  • Rev.8.00.95 and earlierAffected
Yamaha Broadband VoIP Router RT58iYamaha Corporation
  • Rev.9.01.51 and earlierAffected
Yamaha Broadband VoIP Router NVR500Yamaha Corporation
  • Rev.11.00.36 and earlierAffected
Yamaha Gigabit VPN Router RTX810Yamaha Corporation
  • Rev.11.01.31 and earlierAffected
Yamaha Firewall FWX120Yamaha Corporation
  • Rev.11.03.25 and earlierAffected
Biz Box Router N58i, N500, NVR500, and RTX810NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION
  • n/aAffected
Biz Box Router N58i, and N500NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.