Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-5985 Details

Description

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.1 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://jvn.jp/en/jp/JVN43172719/index.html	CVE	Third Party AdvisoryVDB Entry
https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html	CVE	Vendor Advisory
http://jvn.jp/en/jp/JVN43172719/index.html	[email protected]	Third Party AdvisoryVDB Entry
https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[email protected]

Affected Products

Product	Versions
ntt-east pr-s300ne firmware	<= 19.41
CPE cpe:2.3:o:ntt-east:pr-s300ne_firmware:::::::: Remediation No remediation found in references.
ntt-east pr-s300ne	All versions
CPE cpe:2.3:h:ntt-east:pr-s300ne:-:::::::* Remediation No remediation found in references.
ntt-east rt-s300ne firmware	<= 19.41
CPE cpe:2.3:o:ntt-east:rt-s300ne_firmware:::::::: Remediation No remediation found in references.
ntt-east rt-s300ne	All versions
CPE cpe:2.3:h:ntt-east:rt-s300ne:-:::::::* Remediation No remediation found in references.
ntt-east rv-s340ne firmware	<= 19.41
CPE cpe:2.3:o:ntt-east:rv-s340ne_firmware:::::::: Remediation No remediation found in references.
ntt-east rv-s340ne	All versions
CPE cpe:2.3:h:ntt-east:rv-s340ne:-:::::::* Remediation No remediation found in references.
ntt-east pr-s300hi firmware	<= 19.01.0005
CPE cpe:2.3:o:ntt-east:pr-s300hi_firmware:::::::: Remediation No remediation found in references.
ntt-east pr-s300hi	All versions
CPE cpe:2.3:h:ntt-east:pr-s300hi:-:::::::* Remediation No remediation found in references.
ntt-east rt-s300hi firmware	<= 19.01.0005
CPE cpe:2.3:o:ntt-east:rt-s300hi_firmware:::::::: Remediation No remediation found in references.
ntt-east rt-s300hi	All versions
CPE cpe:2.3:h:ntt-east:rt-s300hi:-:::::::* Remediation No remediation found in references.
ntt-east rv-s340hi firmware	<= 19.01.0005
CPE cpe:2.3:o:ntt-east:rv-s340hi_firmware:::::::: Remediation No remediation found in references.
ntt-east rv-s340hi	All versions
CPE cpe:2.3:h:ntt-east:rv-s340hi:-:::::::* Remediation No remediation found in references.
ntt-east pr-s300se firmware	<= 19.40
CPE cpe:2.3:o:ntt-east:pr-s300se_firmware:::::::: Remediation No remediation found in references.
ntt-east pr-s300se	All versions
CPE cpe:2.3:h:ntt-east:pr-s300se:-:::::::* Remediation No remediation found in references.
ntt-east rt-s300se firmware	<= 19.40
CPE cpe:2.3:o:ntt-east:rt-s300se_firmware:::::::: Remediation No remediation found in references.
ntt-east rt-s300se	All versions
CPE cpe:2.3:h:ntt-east:rt-s300se:-:::::::* Remediation No remediation found in references.
ntt-east rv-s340se firmware	<= 19.40
CPE cpe:2.3:o:ntt-east:rv-s340se_firmware:::::::: Remediation No remediation found in references.
ntt-east rv-s340se	All versions
CPE cpe:2.3:h:ntt-east:rv-s340se:-:::::::* Remediation No remediation found in references.
ntt-east pr-400ne firmware	<= 7.42
CPE cpe:2.3:o:ntt-east:pr-400ne_firmware:::::::: Remediation No remediation found in references.
ntt-east pr-400ne	All versions
CPE cpe:2.3:h:ntt-east:pr-400ne:-:::::::* Remediation No remediation found in references.
ntt-east rt-400ne firmware	<= 7.42
CPE cpe:2.3:o:ntt-east:rt-400ne_firmware:::::::: Remediation No remediation found in references.
ntt-east rt-400ne	All versions
CPE cpe:2.3:h:ntt-east:rt-400ne:-:::::::* Remediation No remediation found in references.
ntt-east rv-440ne firmware	<= 7.42
CPE cpe:2.3:o:ntt-east:rv-440ne_firmware:::::::: Remediation No remediation found in references.
ntt-east rv-440ne	All versions
CPE cpe:2.3:h:ntt-east:rv-440ne:-:::::::* Remediation No remediation found in references.
ntt-east pr-400ki firmware	<= 07.00.1010
CPE cpe:2.3:o:ntt-east:pr-400ki_firmware:::::::: Remediation No remediation found in references.
ntt-east pr-400ki	All versions
CPE cpe:2.3:h:ntt-east:pr-400ki:-:::::::* Remediation No remediation found in references.
ntt-east rt-400ki firmware	<= 07.00.1010
CPE cpe:2.3:o:ntt-east:rt-400ki_firmware:::::::: Remediation No remediation found in references.
ntt-east rt-400ki	All versions
CPE cpe:2.3:h:ntt-east:rt-400ki:-:::::::* Remediation No remediation found in references.
ntt-east rv-440ki firmware	<= 07.00.1010
CPE cpe:2.3:o:ntt-east:rv-440ki_firmware:::::::: Remediation No remediation found in references.
ntt-east rv-440ki	All versions
CPE cpe:2.3:h:ntt-east:rv-440ki:-:::::::* Remediation No remediation found in references.
ntt-east pr-400mi firmware	<= 07.00.1012
CPE cpe:2.3:o:ntt-east:pr-400mi_firmware:::::::: Remediation No remediation found in references.
ntt-east pr-400mi	All versions
CPE cpe:2.3:h:ntt-east:pr-400mi:-:::::::* Remediation No remediation found in references.
ntt-east rt-400mi firmware	<= 07.00.1012
CPE cpe:2.3:o:ntt-east:rt-400mi_firmware:::::::: Remediation No remediation found in references.
ntt-east rt-400mi	All versions
CPE cpe:2.3:h:ntt-east:rt-400mi:-:::::::* Remediation No remediation found in references.
ntt-east rv-440mi firmware	<= 07.00.1012
CPE cpe:2.3:o:ntt-east:rv-440mi_firmware:::::::: Remediation No remediation found in references.
ntt-east rv-440mi	All versions
CPE cpe:2.3:h:ntt-east:rv-440mi:-:::::::* Remediation No remediation found in references.
ntt-east pr-500ki firmware	<= 01.00.0090
CPE cpe:2.3:o:ntt-east:pr-500ki_firmware:::::::: Remediation No remediation found in references.
ntt-east pr-500ki	All versions
CPE cpe:2.3:h:ntt-east:pr-500ki:-:::::::* Remediation No remediation found in references.
ntt-east rt-500ki firmware	<= 01.00.0090
CPE cpe:2.3:o:ntt-east:rt-500ki_firmware:::::::: Remediation No remediation found in references.
ntt-east rt-500ki	All versions
CPE cpe:2.3:h:ntt-east:rt-500ki:-:::::::* Remediation No remediation found in references.
ntt-east rs-500ki firmware	<= 01.00.0070
CPE cpe:2.3:o:ntt-east:rs-500ki_firmware:::::::: Remediation No remediation found in references.
ntt-east rs-500ki	All versions
CPE cpe:2.3:h:ntt-east:rs-500ki:-:::::::* Remediation No remediation found in references.
ntt-east pr-500mi firmware	<= 01.01.0014
CPE cpe:2.3:o:ntt-east:pr-500mi_firmware:::::::: Remediation No remediation found in references.
ntt-east pr-500mi	All versions
CPE cpe:2.3:h:ntt-east:pr-500mi:-:::::::* Remediation No remediation found in references.
ntt-east rt-500mi firmware	<= 01.01.0014
CPE cpe:2.3:o:ntt-east:rt-500mi_firmware:::::::: Remediation No remediation found in references.
ntt-east rt-500mi	All versions
CPE cpe:2.3:h:ntt-east:rt-500mi:-:::::::* Remediation No remediation found in references.
ntt-east rs-500mi firmware	<= 03.01.0019
CPE cpe:2.3:o:ntt-east:rs-500mi_firmware:::::::: Remediation No remediation found in references.
ntt-east rs-500mi	All versions
CPE cpe:2.3:h:ntt-east:rs-500mi:-:::::::* Remediation No remediation found in references.
ntt-west pr-s300ne firmware	<= 19.41
CPE cpe:2.3:o:ntt-west:pr-s300ne_firmware:::::::: Remediation No remediation found in references.
ntt-west pr-s300ne	All versions
CPE cpe:2.3:h:ntt-west:pr-s300ne:-:::::::* Remediation No remediation found in references.
ntt-west rt-s300ne firmware	<= 19.41
CPE cpe:2.3:o:ntt-west:rt-s300ne_firmware:::::::: Remediation No remediation found in references.
ntt-west rt-s300ne	All versions
CPE cpe:2.3:h:ntt-west:rt-s300ne:-:::::::* Remediation No remediation found in references.
ntt-west rv-s340ne firmware	<= 19.41
CPE cpe:2.3:o:ntt-west:rv-s340ne_firmware:::::::: Remediation No remediation found in references.
ntt-west rv-s340ne	All versions
CPE cpe:2.3:h:ntt-west:rv-s340ne:-:::::::* Remediation No remediation found in references.
ntt-west pr-s300hi firmware	<= 19.01.0005
CPE cpe:2.3:o:ntt-west:pr-s300hi_firmware:::::::: Remediation No remediation found in references.
ntt-west pr-s300hi	All versions
CPE cpe:2.3:h:ntt-west:pr-s300hi:-:::::::* Remediation No remediation found in references.
ntt-west rt-s300hi firmware	<= 19.01.0005
CPE cpe:2.3:o:ntt-west:rt-s300hi_firmware:::::::: Remediation No remediation found in references.
ntt-west rt-s300hi	All versions
CPE cpe:2.3:h:ntt-west:rt-s300hi:-:::::::* Remediation No remediation found in references.
ntt-west rv-s340hi firmware	<= 19.01.0005
CPE cpe:2.3:o:ntt-west:rv-s340hi_firmware:::::::: Remediation No remediation found in references.
ntt-west rv-s340hi	All versions
CPE cpe:2.3:h:ntt-west:rv-s340hi:-:::::::* Remediation No remediation found in references.
ntt-west pr-s300se firmware	<= 19.40
CPE cpe:2.3:o:ntt-west:pr-s300se_firmware:::::::: Remediation No remediation found in references.
ntt-west pr-s300se	All versions
CPE cpe:2.3:h:ntt-west:pr-s300se:-:::::::* Remediation No remediation found in references.
ntt-west rt-s300se firmware	<= 19.40
CPE cpe:2.3:o:ntt-west:rt-s300se_firmware:::::::: Remediation No remediation found in references.
ntt-west rt-s300se	All versions
CPE cpe:2.3:h:ntt-west:rt-s300se:-:::::::* Remediation No remediation found in references.
ntt-west rv-s340se firmware	<= 19.40
CPE cpe:2.3:o:ntt-west:rv-s340se_firmware:::::::: Remediation No remediation found in references.
ntt-west rv-s340se	All versions
CPE cpe:2.3:h:ntt-west:rv-s340se:-:::::::* Remediation No remediation found in references.
ntt-west pr-400ne firmware	<= 7.42
CPE cpe:2.3:o:ntt-west:pr-400ne_firmware:::::::: Remediation No remediation found in references.
ntt-west pr-400ne	All versions
CPE cpe:2.3:h:ntt-west:pr-400ne:-:::::::* Remediation No remediation found in references.
ntt-west rt-400ne firmware	<= 7.42
CPE cpe:2.3:o:ntt-west:rt-400ne_firmware:::::::: Remediation No remediation found in references.
ntt-west rt-400ne	All versions
CPE cpe:2.3:h:ntt-west:rt-400ne:-:::::::* Remediation No remediation found in references.
ntt-west rv-440ne firmware	<= 7.42
CPE cpe:2.3:o:ntt-west:rv-440ne_firmware:::::::: Remediation No remediation found in references.
ntt-west rv-440ne	All versions
CPE cpe:2.3:h:ntt-west:rv-440ne:-:::::::* Remediation No remediation found in references.
ntt-west pr-400ki firmware	<= 07.00.1010
CPE cpe:2.3:o:ntt-west:pr-400ki_firmware:::::::: Remediation No remediation found in references.
ntt-west pr-400ki	All versions
CPE cpe:2.3:h:ntt-west:pr-400ki:-:::::::* Remediation No remediation found in references.
ntt-west rt-400ki firmware	<= 07.00.1010
CPE cpe:2.3:o:ntt-west:rt-400ki_firmware:::::::: Remediation No remediation found in references.
ntt-west rt-400ki	All versions
CPE cpe:2.3:h:ntt-west:rt-400ki:-:::::::* Remediation No remediation found in references.
ntt-west rv-440ki firmware	<= 07.00.1010
CPE cpe:2.3:o:ntt-west:rv-440ki_firmware:::::::: Remediation No remediation found in references.
ntt-west rv-440ki	All versions
CPE cpe:2.3:h:ntt-west:rv-440ki:-:::::::* Remediation No remediation found in references.
ntt-west pr-400mi firmware	<= 07.00.1012
CPE cpe:2.3:o:ntt-west:pr-400mi_firmware:::::::: Remediation No remediation found in references.
ntt-west pr-400mi	All versions
CPE cpe:2.3:h:ntt-west:pr-400mi:-:::::::* Remediation No remediation found in references.
ntt-west rt-400mi firmware	<= 07.00.1012
CPE cpe:2.3:o:ntt-west:rt-400mi_firmware:::::::: Remediation No remediation found in references.
ntt-west rt-400mi	All versions
CPE cpe:2.3:h:ntt-west:rt-400mi:-:::::::* Remediation No remediation found in references.
ntt-west rv-440mi firmware	<= 07.00.1012
CPE cpe:2.3:o:ntt-west:rv-440mi_firmware:::::::: Remediation No remediation found in references.
ntt-west rv-440mi	All versions
CPE cpe:2.3:h:ntt-west:rv-440mi:-:::::::* Remediation No remediation found in references.
ntt-west pr-500ki firmware	<= 01.00.0090
CPE cpe:2.3:o:ntt-west:pr-500ki_firmware:::::::: Remediation No remediation found in references.
ntt-west pr-500ki	All versions
CPE cpe:2.3:h:ntt-west:pr-500ki:-:::::::* Remediation No remediation found in references.
ntt-west rt-500ki firmware	<= 01.00.0090
CPE cpe:2.3:o:ntt-west:rt-500ki_firmware:::::::: Remediation No remediation found in references.
ntt-west rt-500ki	All versions
CPE cpe:2.3:h:ntt-west:rt-500ki:-:::::::* Remediation No remediation found in references.
ntt-west pr-500mi firmware	<= 01.01.0011
CPE cpe:2.3:o:ntt-west:pr-500mi_firmware:::::::: Remediation No remediation found in references.
ntt-west pr-500mi	All versions
CPE cpe:2.3:h:ntt-west:pr-500mi:-:::::::* Remediation No remediation found in references.
ntt-west rt-500mi firmware	<= 01.01.0011
CPE cpe:2.3:o:ntt-west:rt-500mi_firmware:::::::: Remediation No remediation found in references.
ntt-west rt-500mi	All versions
CPE cpe:2.3:h:ntt-west:rt-500mi:-:::::::* Remediation No remediation found in references.

Change History

4 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 16, 2019	Initial Analysis	[email protected]

CVE-2019-5985 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation