7.8

CVE-2020-5548

Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210 firmware Rev.14.01.33 and earlier, RTX3500 firmware Rev.14.00.26 and earlier, and RTX5000 firmware Rev.14.00.26 and earlier), Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00.38 and earlier), and Yamaha Firewall(FWX120 firmware Rev.11.03.27 and earlier) allow remote attackers to cause a denial of service via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Yamaha ≫ Rtx830 Firmware Version <= 15.02.09
   Yamaha ≫ Rtx830 Version -
Yamaha ≫ Nvr510 Firmware Version <= 15.01.14
   Yamaha ≫ Nvr510 Version -
Yamaha ≫ Nvr700w Firmware Version <= 15.00.15
   Yamaha ≫ Nvr700w Version -
Yamaha ≫ Rtx1210 Firmware Version <= 14.01.33
   Yamaha ≫ Rtx1210 Version -
Yamaha ≫ Rtx5000 Firmware Version <= 14.00.26
   Yamaha ≫ Rtx5000 Version -
Yamaha ≫ Rtx3500 Firmware Version <= 14.00.26
   Yamaha ≫ Rtx3500 Version -
Yamaha ≫ Fwx120 Firmware Version <= 11.03.27
   Yamaha ≫ Fwx120 Version -
Yamaha ≫ Rtx810 Firmware Version <= 11.01.33
   Yamaha ≫ Rtx810 Version -
Yamaha ≫ Nvr500 Firmware Version <= 11.00.38
   Yamaha ≫ Nvr500 Version -
Yamaha ≫ Rtx1200 Firmware Version <= 10.01.76
   Yamaha ≫ Rtx1200 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.42% 0.693
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NIST 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN38732359.html
Vendor Advisory
Mitigation
https://jvn.jp/en/jp/JVN38732359/index.html
Third Party Advisory