Vulnerability Description
NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ntt-East | Rt-400Mi Firmware | <= 07.00.1006 |
| Ntt-East | Rt-400Mi | - |
| Ntt-West | Pr-400Mi Firmware | <= 07.00.1005 |
| Ntt-West | Pr-400Mi | - |
| Ntt-West | Rt-400Mi | - |
| Ntt-West | Rt-400Mi Firmware | <= 07.00.1005 |
| Ntt-West | Rv-440Mi Firmware | <= 07.00.1005 |
| Ntt-West | Rv-440Mi | - |
| Ntt-East | Pr-400Mi Firmware | <= 07.00.1006 |
| Ntt-East | Pr-400Mi | - |
| Ntt-East | Rv-440Mi Firmware | <= 07.00.1006 |
| Ntt-East | Rv-440Mi | - |
References
- http://jvn.jp/en/jp/JVN77403442/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000105Third Party AdvisoryVDB EntryVendor Advisory
- http://web116.jp/ced/support/news/contents/2016/20160627.htmlVendor Advisory
- http://www.ntt-west.co.jp/kiki/support/flets/hgw4_mi/160627.htmlVendor Advisory
- http://jvn.jp/en/jp/JVN77403442/index.htmlVendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2016-000105Third Party AdvisoryVDB EntryVendor Advisory
- http://web116.jp/ced/support/news/contents/2016/20160627.htmlVendor Advisory
- http://www.ntt-west.co.jp/kiki/support/flets/hgw4_mi/160627.htmlVendor Advisory
FAQ
What is CVE-2016-1227?
CVE-2016-1227 is a vulnerability with a CVSS score of 7.2 (HIGH). NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earl...
How severe is CVE-2016-1227?
CVE-2016-1227 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-1227?
Check the references section above for vendor advisories and patch information. Affected products include: Ntt-East Rt-400Mi Firmware, Ntt-East Rt-400Mi, Ntt-West Pr-400Mi Firmware, Ntt-West Pr-400Mi, Ntt-West Rt-400Mi.