Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver
Published Sep 12, 2019
6.1
MEDIUMCVSS 3.1
EPSS 0.89%
Description
Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
- Vendor n/a Product Hikari Denwa router/Home GateWay Defaultn/a
- Version PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlierStatusaffectedConstraints-
- Version PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlierStatusaffectedConstraints-
- Version PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlierStatusaffectedConstraints-
- Version PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlierStatusaffectedConstraints-
- Version PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlierStatusaffectedConstraints-
- Version PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlierStatusaffectedConstraints-
- Version PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlierStatusaffectedConstraints-
- Version PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlierStatusaffectedConstraints-
- Version PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlierStatusaffectedConstraints-
- Version RS-500KI firmware version Ver.01.00.0070 and earlierStatusaffectedConstraints-
- Version RS-500MI firmware version Ver.03.01.0019 and earlierStatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| n/a | Hikari Denwa router/Home GateWay | n/a |
|
Configuration 1
- ≤ 19.41
Configuration 2
- ≤ 19.41
Configuration 3
- ≤ 19.41
Configuration 4
- ≤ 19.01.0005
Configuration 5
- ≤ 19.01.0005
Configuration 6
- ≤ 19.01.0005
Configuration 7
- ≤ 19.40
Configuration 8
- ≤ 19.40
Configuration 9
- ≤ 19.40
Configuration 10
- ≤ 7.42
Configuration 11
- ≤ 7.42
Configuration 12
- ≤ 7.42
Configuration 13
- ≤ 07.00.1010
Configuration 14
- ≤ 07.00.1010
Configuration 15
- ≤ 07.00.1010
Configuration 16
- ≤ 07.00.1012
Configuration 17
- ≤ 07.00.1012
Configuration 18
- ≤ 07.00.1012
Configuration 19
- ≤ 01.00.0090
Configuration 20
- ≤ 01.00.0090
Configuration 21
- ≤ 01.00.0070
Configuration 22
- ≤ 01.01.0014
Configuration 23
- ≤ 01.01.0014
Configuration 24
- ≤ 03.01.0019
Configuration 25
- ≤ 19.41
Configuration 26
- ≤ 19.41
Configuration 27
- ≤ 19.41
Configuration 28
- ≤ 19.01.0005
Configuration 29
- ≤ 19.01.0005
Configuration 30
- ≤ 19.01.0005
Configuration 31
- ≤ 19.40
Configuration 32
- ≤ 19.40
Configuration 33
- ≤ 19.40
Configuration 34
- ≤ 7.42
Configuration 35
- ≤ 7.42
Configuration 36
- ≤ 7.42
Configuration 37
- ≤ 07.00.1010
Configuration 38
- ≤ 07.00.1010
Configuration 39
- ≤ 07.00.1010
Configuration 40
- ≤ 07.00.1012
Configuration 41
- ≤ 07.00.1012
Configuration 42
- ≤ 07.00.1012
Configuration 43
- ≤ 01.00.0090
Configuration 44
- ≤ 01.00.0090
Configuration 45
- ≤ 01.01.0011
Configuration 46
- ≤ 01.01.0011
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
No CVSS v3.0 score for this CVE.
AV:N/AC:M/Au:N/C:N/I:P/A:N
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
Score over time
2021–2026- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
Percentile over time
- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
Table of values (12 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 0.89% (0.00890) | 57.95th | v5 (v2026.06.15) |
| Sep 20, 2026 | 0.89% (0.00890) | 57.83th | v5 (v2026.06.15) |
| Jul 20, 2024 | 0.11% (0.00115) | 45.53th | v3 (v2023.03.01) |
| Jul 3, 2024 | 0.11% (0.00115) | 45.41th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.11% (0.00115) | 43.40th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.05% (0.01055) | 52.13th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.05% (0.01055) | 48.43th | v2 (v2022.01.01) |
| Feb 4, 2022 | 2.56% (0.02561) | 61.74th | v2 (v2022.01.01) |
| Feb 3, 2022 | 3.63% (0.03634) | 72.14th | v1 |
| Jan 6, 2022 | 3.63% (0.03634) | 71.90th | v1 |
| Jan 5, 2022 | 0.83% (0.00833) | 59.62th | v5 (v2026.06.15) |
| Apr 14, 2021 | 0.83% (0.00833) | 0.00th | v1 |
References (2)
- http://jvn.jp/en/jp/JVN43172719/index.html x_refsource_MISCThird Party AdvisoryVDB Entry
- https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html x_refsource_CONFIRMVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://jvn.jp/en/jp/JVN43172719/index.html | x_refsource_MISCThird Party AdvisoryVDB Entry | |
| https://www.ntt-west.co.jp/kiki/support/flets/hgw/190626.html | x_refsource_CONFIRMVendor Advisory |
Change history (0)
No recorded changes yet.