PT-2024-32369 · Nippon Telegraph Telephone · Home Gateway/Hikari Denwa

Keishi Awata · Published 2024-09-26 · Updated 2024-10-17 · CVE-2024-47044

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Home GateWay/Hikari Denwa routers (affected versions not specified)

Description The issue is related to insufficient access restrictions for Device Setting pages in the affected routers. If exploited, an attacker who has identified the WAN-side IPv6 address may access the product's Device Setting page via WAN-side. The vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

CVE-2024-47044

Affected Products

Home Gateway/Hikari Denwa

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2024-47044 · Security Note
• https://t.me/cvenotify/98409 · Telegram Post
• https://web116.jp/ced/support/version/broadband/rt_400mi · Note
• https://web116.jp/ced/support/version/broadband/pr_400mi · Note
• https://twitter.com/VulmonFeeds/status/1839250665375248641 · Twitter Post
• https://web116.jp/ced/support/news/contents/2024/20240930.html · Note
• https://web116.jp/ced/support/version/broadband/500mi · Note
• https://web116.jp/ced/support/version/broadband/rv_440mi · Note
• https://web116.jp/ced/support/version/broadband/600mi · Note
• https://twitter.com/CVEnew/status/1839224484395413777 · Twitter Post
• https://t.me/cvenotify/96097 · Telegram Post
• https://t.me/cvedetector/6395 · Telegram Post
• https://jvn.jp/en/jp/JVN78356367 · Note