NetSight
IP …
medium6.8

CVE-2018-0666

Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an adminis…

Impact

Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative user to embed arbitrary scripts to the configuration data through a certain form field of the configuration page, which may be executed on another administrative user's web browser. This is a different vulnerability from CVE-2018-0665.

Affected products

VendorProductAffected versions
YamahaRt57i Firmware
through rev.8.00.95
YamahaRt58i Firmware
through rev.9.01.51
YamahaNvr500 Firmware
through rev.11.00.36
YamahaRtx810 Firmware
through rev.11.01.31

References