What’s Vulnerable › Vulnerabilities

CVE-2008-0524

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-01-31 · updated 2026-06-16
• Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the management interface in multiple Yamaha RT series routers allows remote attackers to change password settings and probably other configuration settings as administrators via unspecified vectors.

Affected products

• Yamaha Rt107E: all versions
• Yamaha Rt52Pro: all versions
• Yamaha Rt56V: all versions
• Yamaha Rt57I: all versions
• Yamaha Rt58I: all versions
• Yamaha Rt60W: all versions
• Yamaha Rt80I: all versions
• Yamaha Rta50I: all versions
• Yamaha Rta52I: all versions
• Yamaha Rta54I: all versions
• Yamaha Rta55I: all versions
• Yamaha Rtv700: all versions
• Yamaha Rtw65B: all versions
• Yamaha Rtw65I: all versions
• Yamaha Rtx1000: all versions
• Yamaha Rtx1100: all versions
• Yamaha Rtx1500: all versions
• Yamaha Srt100: all versions

References

• http://jvn.jp/jp/JVN%2388575577/index.html
• http://secunia.com/advisories/28690
• http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html
• http://www.securityfocus.com/bid/27491
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40015
• http://jvn.jp/jp/JVN%2388575577/index.html
• http://secunia.com/advisories/28690
• http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN88575577.html
• http://www.securityfocus.com/bid/27491
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40015

Get alerted when CVE-2008-0524 or the next vulnerability affects your stack