CVE-2016-1228

Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the authentication of arbitrary users.

• CWE-352

• http://jvn.jp/en/jp/JVN45034304/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000106Third Party Advisory, VDB Entry, Vendor Advisory
• http://web116.jp/ced/support/news/contents/2016/20160627.htmlVendor Advisory
• http://www.ntt-west.co.jp/kiki/support/flets/hgw4_mi/160627.htmlVendor Advisory
• http://jvn.jp/en/jp/JVN45034304/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2016-000106Third Party Advisory, VDB Entry, Vendor Advisory
• http://web116.jp/ced/support/news/contents/2016/20160627.htmlVendor Advisory
• http://www.ntt-west.co.jp/kiki/support/flets/hgw4_mi/160627.htmlVendor Advisory

Published

Jul 3, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1222Cross-site scripting (XSS) vulnerability in Kobe Beauty php-…6.1
• CVE-2016-1223Directory traversal vulnerability in Trend Micro Office Scan…5.3
• CVE-2016-1224CRLF injection vulnerability in Trend Micro Worry-Free Busin…6.1
• CVE-2016-1225Trend Micro Internet Security 8 and 10 allows remote attacke…
• CVE-2016-1226Cross-site scripting (XSS) vulnerability in Trend Micro Inte…
• CVE-2016-1227NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400…7.2
• CVE-2016-1229Cross-site scripting (XSS) vulnerability in HumHub 0.20.0-be…
• CVE-2016-1230Cross-site scripting (XSS) vulnerability in NTT PC Communica…
• CVE-2016-1231Directory traversal vulnerability in the HTTP file-serving m…
• CVE-2016-1232The mod_dialback module in Prosody before 0.9.9 does not pro…
• CVE-2016-1233An unspecified udev rule in the Debian fuse package in jessi…
• CVE-2016-1234Stack-based buffer overflow in the glob implementation in GN…