vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2019-5985

MEDIUM
6.1
CVSS Score
Published: September 12, 2019 at 03:58 PM UTC
Updated: June 17, 2026 at 02:38 AM UTC
94 products affected across 4 vendorsRv 440MI FirmwareRt 400MI FirmwarePr 400MI Firmware

Using Hikari Denwa router/Home GateWay by Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION?

Get instant alerts when new vulnerabilities affect Hikari Denwa router/Home GateWay - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.1
Exploit prediction
EPSS 0.9%

Description

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Pr 400KI Firmware· Ntt East
95%
v ≤ 07.00.1010
ntt-east-pr-400ki (same device)
Pr 400MI Firmware· Ntt East
95%
v ≤ 07.00.1012
ntt-east-pr-400mi (same device)
Pr 400NE Firmware· Ntt East
95%
v ≤ 7.42
ntt-east-pr-400ne (same device)
Pr 500KI Firmware· Ntt East
95%
v ≤ 01.00.0090
ntt-east-pr-500ki (same device)
Pr 500MI Firmware· Ntt East
95%
v ≤ 01.01.0014
ntt-east-pr-500mi (same device)
Pr S300HI Firmware· Ntt East
95%
v ≤ 19.01.0005
ntt-east-pr-s300hi (same device)
Pr S300NE Firmware· Ntt East
95%
v ≤ 19.41
ntt-east-pr-s300ne (same device)
Pr S300SE Firmware· Ntt East
95%
v ≤ 19.40
ntt-east-pr-s300se (same device)
Rs 500KI Firmware· Ntt East
95%
v ≤ 01.00.0070
ntt-east-rs-500ki (same device)
Rs 500MI Firmware· Ntt East
95%
v ≤ 03.01.0019
ntt-east-rs-500mi (same device)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

x_refsource_MISCThird Party AdvisoryVDB Entry
Source: [email protected]
http://jvn.jp/en/jp/JVN43172719/index.html
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html

CVSS

6.1MEDIUM[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-79

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card