Vulnerability in Nippon Telegraph And Telephone East Corporation Hikari Denwa Router Pr-400mi

CVE-2024-47044

Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas.

EPSS: 0.004 (35.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-2024-47044?
CVE-2024-47044 is a medium-severity vulnerability in Nippon Telegraph And Telephone East Corporation Hikari Denwa Router Pr-400mi, classified under User Interface (UI) Misrepresentation of Critical Information. CVSS score: 5.3/10. Published 2024-09-26.
How severe is CVE-2024-47044?
Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2024-47044 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.