What’s Vulnerable › Vulnerabilities

CVE-2016-1228

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-07-03 · updated 2026-06-17
• Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the authentication of arbitrary users.

Affected products

• Ntt-East Pr-400Mi Firmware: 07.00.1006
• Ntt-East Rt-400Mi Firmware: through 07.00.1006
• Ntt-East Rv-440Mi Firmware: through 07.00.1006
• Ntt-West Pr-400Mi: all versions
• Ntt-West Pr-400Mi Firmware: through 07.00.1005
• Ntt-West Rt-400Mi Firmware: through 07.00.1005
• Ntt-West Rv-440Mi Firmware: through 07.00.1005

References

• http://jvn.jp/en/jp/JVN45034304/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000106
• http://web116.jp/ced/support/news/contents/2016/20160627.html
• http://www.ntt-west.co.jp/kiki/support/flets/hgw4_mi/160627.html
• http://jvn.jp/en/jp/JVN45034304/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000106
• http://web116.jp/ced/support/news/contents/2016/20160627.html
• http://www.ntt-west.co.jp/kiki/support/flets/hgw4_mi/160627.html

Get alerted when CVE-2016-1228 or the next vulnerability affects your stack