Description
Cross-site script inclusion vulnerability in the Web GUI of RTX830 Rev.15.02.17 and earlier, NVR510 Rev.15.01.18 and earlier, NVR700W Rev.15.00.19 and earlier, and RTX1210 Rev.14.01.38 and earlier allows a remote authenticated attacker to alter the settings of the product via a specially crafted web page.
References (4)
Scores
CVSS v3
5.4
EPSS
0.0028
EPSS Percentile
51.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-829
Status
published
Products (8)
ntt-west/biz_box_nvr510_firmware
< 15.01.18
ntt-west/biz_box_nvr700w_firmware
< 15.00.19
ntt-west/biz_box_rtx1210_firmware
< 14.01.38
ntt-west/biz_box_rtx830_firmware
< 15.02.17
yamaha/nvr510_firmware
< 15.01.18
yamaha/nvr700w_firmware
< 15.00.19
yamaha/rtx1210_firmware
< 14.01.38
yamaha/rtx830_firmware
< 15.02.17
Published
Nov 24, 2021
Tracked Since
Feb 18, 2026