NetSight
IP …
high8.8

CVE-2016-1228

Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT …

Impact

Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Affected products

VendorProductAffected versions
Ntt-WestPr-400mi Firmware
through 07.00.1005
Ntt-WestPr-400mi
All versions
Ntt-WestRt-400mi Firmware
through 07.00.1005
Ntt-WestRv-440mi Firmware
through 07.00.1005
Ntt-EastPr-400mi Firmware
Version 07.00.1006
Ntt-EastRt-400mi Firmware
through 07.00.1006
Ntt-EastRv-440mi Firmware
through 07.00.1006

Weakness classification

CWE-352

References