vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2018-0666

N/A
Published: January 9, 2019 at 10:00 PM UTC
Updated: June 17, 2026 at 01:31 AM UTC
15 products affected across 3 vendorsNVR500 FirmwareRTX810 FirmwareRT57I Firmware

Using Yamaha Broadband VoIP Router RT57i by Yamaha Corporation?

Get instant alerts when new vulnerabilities affect Yamaha Broadband VoIP Router RT57i - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.7%

Description

Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative user to embed arbitrary scripts to the configuration data through a certain form field of the configuration page, which may be executed on another administrative user's web browser. This is a different vulnerability from CVE-2018-0665.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

NVR500 Firmware· Yamaha
95%
v ≤ rev.11.00.36
yamaha-nvr500 (same device)
RT57I Firmware· Yamaha
95%
v ≤ rev.8.00.95
yamaha-rt57i (same device)
RT58I Firmware· Yamaha
95%
v ≤ rev.9.01.51
yamaha-rt58i (same device)
RTX810 Firmware· Yamaha
95%
v ≤ rev.11.01.31
yamaha-rtx810 (same device)
Biz Box Router N500· Nippon Telegraph and Telephone West
60%
All versions
Biz Box Router N58i· Nippon Telegraph and Telephone West
60%
All versions
Biz Box Router NVR500· Nippon Telegraph and Telephone West
60%
All versions
Biz Box Router RTX810· Nippon Telegraph and Telephone West
60%
All versions
Biz Box Router N500· Ntt East
60%
All versions
Biz Box Router N58i· Ntt East
60%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (4)

x_refsource_MISCThird Party Advisory
Source: [email protected]
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN69967692.html
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://flets-w.com/solution/kiki_info/info/180829.html
Third Party Advisoryx_refsource_JVN
Source: [email protected]
https://jvn.jp/en/jp/JVN69967692/index.html
x_refsource_MISCThird Party Advisory
Source: [email protected]
https://web116.jp/ced/support/news/contents/2018/20180829b.html

CVSS

5.2MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card