{"id":"CVE-2019-5985","state":"PUBLISHED","title":"Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S3","description":"Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","publishedAt":"2019-09-12T15:58:55.000Z","updatedAt":"2024-08-04T20:09:24.041Z","severity":null,"assigner":"jpcert","products":["Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Hikari Denwa router/Home GateWay","Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Hikari Denwa router/Home GateWay"],"affected":[{"vendor":"Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION","product":"Hikari Denwa router/Home GateWay","versions":[{"version":"PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier","status":"affected"},{"version":"PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier","status":"affected"},{"version":"PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier","status":"affected"},{"version":"PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier","status":"affected"},{"version":"PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier","status":"affected"},{"version":"PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier","status":"affected"},{"version":"PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier","status":"affected"},{"version":"RS-500KI firmware version Ver.01.00.0070 and earlier","status":"affected"},{"version":"PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier","status":"affected"},{"version":"RS-500MI firmware version Ver.03.01.0019 and earlier","status":"affected"}]},{"vendor":"Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION","product":"Hikari Denwa router/Home GateWay","versions":[{"version":"PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier","status":"affected"},{"version":"PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier","status":"affected"},{"version":"PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier","status":"affected"},{"version":"PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier","status":"affected"},{"version":"PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier","status":"affected"},{"version":"PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier","status":"affected"},{"version":"PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier","status":"affected"},{"version":"PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier","status":"affected"}]}],"references":["http://jvn.jp/en/jp/JVN43172719/index.html","https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:04.126Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/5xxx/CVE-2019-5985.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-5985","state":"PUBLISHED","datePublished":"2019-09-12T15:58:55.000Z","dateUpdated":"2024-08-04T20:09:24.041Z","assignerShortName":"jpcert","assignerOrgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce","dateReserved":"2019-01-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}],"affected":[{"vendor":"Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION","product":"Hikari Denwa router/Home GateWay","versions":[{"version":"PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier","status":"affected"},{"version":"PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier","status":"affected"},{"version":"PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier","status":"affected"},{"version":"PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier","status":"affected"},{"version":"PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier","status":"affected"},{"version":"PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier","status":"affected"},{"version":"PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier","status":"affected"},{"version":"RS-500KI firmware version Ver.01.00.0070 and earlier","status":"affected"},{"version":"PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier","status":"affected"},{"version":"RS-500MI firmware version Ver.03.01.0019 and earlier","status":"affected"}]},{"vendor":"Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION","product":"Hikari Denwa router/Home GateWay","versions":[{"version":"PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier","status":"affected"},{"version":"PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier","status":"affected"},{"version":"PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier","status":"affected"},{"version":"PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier","status":"affected"},{"version":"PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier","status":"affected"},{"version":"PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier","status":"affected"},{"version":"PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier","status":"affected"},{"version":"PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier","status":"affected"}]}],"references":[{"url":"http://jvn.jp/en/jp/JVN43172719/index.html","tags":["x_refsource_MISC"]},{"url":"https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"jpcert","dateUpdated":"2019-09-12T15:58:55.000Z","orgId":"ede6fdc4-6654-4307-a26d-3331c018e2ce"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vultures@jpcert.or.jp","ID":"CVE-2019-5985","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Hikari Denwa router/Home GateWay","version":{"version_data":[{"version_value":"PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier"},{"version_value":"PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier"},{"version_value":"PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier"},{"version_value":"PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier"},{"version_value":"PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier"},{"version_value":"PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier"},{"version_value":"PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier"},{"version_value":"RS-500KI firmware version Ver.01.00.0070 and earlier"},{"version_value":"PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier"},{"version_value":"RS-500MI firmware version Ver.03.01.0019 and earlier"}]}}]},"vendor_name":"Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION"},{"product":{"product_data":[{"product_name":"Hikari Denwa router/Home GateWay","version":{"version_data":[{"version_value":"PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier"},{"version_value":"PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier"},{"version_value":"PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier"},{"version_value":"PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier"},{"version_value":"PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier"},{"version_value":"PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier"},{"version_value":"PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier"},{"version_value":"PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier"}]}}]},"vendor_name":"Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]}]},"references":{"reference_data":[{"name":"http://jvn.jp/en/jp/JVN43172719/index.html","refsource":"MISC","url":"http://jvn.jp/en/jp/JVN43172719/index.html"},{"name":"https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html","refsource":"CONFIRM","url":"https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://jvn.jp/en/jp/JVN43172719/index.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T20:09:24.041Z"}}]}}}