Read the docs
TI-2019-04275 Aliases CVE-2019-5985GHSA-j2h4-m4xq-p47m

Cross-site scripting in Hikari Denwa router/Home GateWay

Priority LOW 29CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

Cross-site scripting vulnerability in Hikari Denwa router/Home GateWay (Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, RS-500KI firmware version Ver.01.00.0070 and earlier, PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier, and RS-500MI firmware version Ver.03.01.0019 and earlier, and Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier, PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier, PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier, PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier, PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier, PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier, PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier, and PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Why it matters now

EPSS 0.0089 59th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATIONHikari Denwa router/Home GateWayPR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier; PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier; PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier; PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier; PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier; PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier; PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier; RS-500KI firmware version Ver.01.00.0070 and earlier; PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier; RS-500MI firmware version Ver.03.01.0019 and earlier—No fix listedCNA
Hikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATIONHikari Denwa router/Home GateWayPR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier; PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier; PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier; PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier; PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier; PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier; PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier; PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier—No fix listedCNA
  • Hikari Denwa router/Home GateWay VendorHikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Affected PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier; PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier; PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier; PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier; PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier; PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier; PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier; RS-500KI firmware version Ver.01.00.0070 and earlier; PR-500MI/RT-500MI firmware version Ver.01.01.0014 and earlier; RS-500MI firmware version Ver.03.01.0019 and earlier Fixed in — No fix listed CNA
  • Hikari Denwa router/Home GateWay VendorHikari Denwa router/Home GateWay provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Affected PR-S300NE/RT-S300NE/RV-S340NE firmware version Ver. 19.41 and earlier; PR-S300HI/RT-S300HI/RV-S340HI firmware version Ver.19.01.0005 and earlier; PR-S300SE/RT-S300SE/RV-S340SE firmware version Ver.19.40 and earlier; PR-400NE/RT-400NE/RV-440NE firmware version Ver.7.42 and earlier; PR-400KI/RT-400KI/RV-440KI firmware version Ver.07.00.1010 and earlier; PR-400MI/RT-400MI/RV-440MI firmware version Ver. 07.00.1012 and earlier; PR-500KI/RT-500KI firmware version Ver.01.00.0090 and earlier; PR-500MI/RT-500MI firmware version Ver.01.01.0011 and earlier Fixed in — No fix listed CNA

CPE configurations NVD · 92

CPEVersionsRoleVendor
cpe:2.3:o:ntt-east:pr-s300ne_firmware:*:*:*:*:*:*:*:*up to 19.41VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:pr-s300ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rt-s300ne_firmware:*:*:*:*:*:*:*:*up to 19.41VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rt-s300ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rv-s340ne_firmware:*:*:*:*:*:*:*:*up to 19.41VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rv-s340ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:pr-s300hi_firmware:*:*:*:*:*:*:*:*up to 19.01.0005VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:pr-s300hi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rt-s300hi_firmware:*:*:*:*:*:*:*:*up to 19.01.0005VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rt-s300hi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
Show 82 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:ntt-east:rv-s340hi_firmware:*:*:*:*:*:*:*:*up to 19.01.0005VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rv-s340hi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:pr-s300se_firmware:*:*:*:*:*:*:*:*up to 19.40VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:pr-s300se:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rt-s300se_firmware:*:*:*:*:*:*:*:*up to 19.40VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rt-s300se:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rv-s340se_firmware:*:*:*:*:*:*:*:*up to 19.40VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rv-s340se:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:pr-400ne_firmware:*:*:*:*:*:*:*:*up to 7.42VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:pr-400ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rt-400ne_firmware:*:*:*:*:*:*:*:*up to 7.42VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rt-400ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rv-440ne_firmware:*:*:*:*:*:*:*:*up to 7.42VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rv-440ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:pr-400ki_firmware:*:*:*:*:*:*:*:*up to 07.00.1010VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:pr-400ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rt-400ki_firmware:*:*:*:*:*:*:*:*up to 07.00.1010VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rt-400ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rv-440ki_firmware:*:*:*:*:*:*:*:*up to 07.00.1010VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rv-440ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:pr-400mi_firmware:*:*:*:*:*:*:*:*up to 07.00.1012VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:pr-400mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rt-400mi_firmware:*:*:*:*:*:*:*:*up to 07.00.1012VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rt-400mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rv-440mi_firmware:*:*:*:*:*:*:*:*up to 07.00.1012VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rv-440mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:pr-500ki_firmware:*:*:*:*:*:*:*:*up to 01.00.0090VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:pr-500ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rt-500ki_firmware:*:*:*:*:*:*:*:*up to 01.00.0090VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rt-500ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rs-500ki_firmware:*:*:*:*:*:*:*:*up to 01.00.0070VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rs-500ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:pr-500mi_firmware:*:*:*:*:*:*:*:*up to 01.01.0014VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:pr-500mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rt-500mi_firmware:*:*:*:*:*:*:*:*up to 01.01.0014VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rt-500mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-east:rs-500mi_firmware:*:*:*:*:*:*:*:*up to 03.01.0019VulnerableNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:h:ntt-east:rs-500mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION
cpe:2.3:o:ntt-west:pr-s300ne_firmware:*:*:*:*:*:*:*:*up to 19.41VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:pr-s300ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rt-s300ne_firmware:*:*:*:*:*:*:*:*up to 19.41VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rt-s300ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rv-s340ne_firmware:*:*:*:*:*:*:*:*up to 19.41VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rv-s340ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:pr-s300hi_firmware:*:*:*:*:*:*:*:*up to 19.01.0005VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:pr-s300hi:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rt-s300hi_firmware:*:*:*:*:*:*:*:*up to 19.01.0005VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rt-s300hi:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rv-s340hi_firmware:*:*:*:*:*:*:*:*up to 19.01.0005VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rv-s340hi:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:pr-s300se_firmware:*:*:*:*:*:*:*:*up to 19.40VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:pr-s300se:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rt-s300se_firmware:*:*:*:*:*:*:*:*up to 19.40VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rt-s300se:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rv-s340se_firmware:*:*:*:*:*:*:*:*up to 19.40VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rv-s340se:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:pr-400ne_firmware:*:*:*:*:*:*:*:*up to 7.42VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:pr-400ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rt-400ne_firmware:*:*:*:*:*:*:*:*up to 7.42VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rt-400ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rv-440ne_firmware:*:*:*:*:*:*:*:*up to 7.42VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rv-440ne:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:pr-400ki_firmware:*:*:*:*:*:*:*:*up to 07.00.1010VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:pr-400ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rt-400ki_firmware:*:*:*:*:*:*:*:*up to 07.00.1010VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rt-400ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rv-440ki_firmware:*:*:*:*:*:*:*:*up to 07.00.1010VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rv-440ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:pr-400mi_firmware:*:*:*:*:*:*:*:*up to 07.00.1012VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:pr-400mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rt-400mi_firmware:*:*:*:*:*:*:*:*up to 07.00.1012VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rt-400mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rv-440mi_firmware:*:*:*:*:*:*:*:*up to 07.00.1012VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rv-440mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:pr-500ki_firmware:*:*:*:*:*:*:*:*up to 01.00.0090VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:pr-500ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rt-500ki_firmware:*:*:*:*:*:*:*:*up to 01.00.0090VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rt-500ki:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:pr-500mi_firmware:*:*:*:*:*:*:*:*up to 01.01.0011VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:pr-500mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.
cpe:2.3:o:ntt-west:rt-500mi_firmware:*:*:*:*:*:*:*:*up to 01.01.0011VulnerableNTT WEST, Inc.
cpe:2.3:h:ntt-west:rt-500mi:-:*:*:*:*:*:*:*not specified by NVDRunning onNTT WEST, Inc.

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-5985
  2. 2026-10-03 Alias added: GHSA-j2h4-m4xq-p47m

References

Sources