Yamaha
12 CVEs across 69 Yamaha products. Browse Yamaha vulnerabilities, severities, and proof-of-concept exploits.
Yamaha products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-22366 | Medium | 6.8 | 2024-01-24 | Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's managem… |
CVE-2021-20844 | Medium | 5.7 | 2021-11-24 | Improper neutralization of HTTP request headers for scripting syntax vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and e… |
CVE-2021-20843 | Medium | 5.4 | 2021-11-24 | Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier… |
CVE-2020-5548 | High | 7.5 | 2020-04-01 | Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Rou… |
CVE-2018-0666 | Medium | 6.8 | 2019-01-09 | Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an adminis… |
CVE-2018-0665 | Medium | 6.8 | 2019-01-09 | Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an adminis… |
CVE-2013-7310 | | 2014-01-23 | The OSPF implementation on Yamaha routers does not consider the possibility of duplicate Link State ID values in Link State Advertisement (LSA) packets before… | |
CVE-2011-1323 | | 2011-05-09 | Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with firmware 6.x through 10.x, and NEC IP38X series routers with firmware 6.x through 10.x, do not prope… | |
CVE-2008-2173 | High | 7.5 | 2008-05-13 | Unspecified vulnerability in Yamaha routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to… |
CVE-2008-0524 | | 2008-01-31 | Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password set… | |
CVE-2005-0356 | | 2005-05-31 | Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denia… | |
CVE-1999-0946 | | 1999-11-02 | Buffer overflow in Yamaha MidiPlug via a Text variable in an EMBED tag. |