CVE-2018-0665

Name: CVE-2018-0665
Creator: NVD / NIST
Published: 2019-01-09T23:29:01.373+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

UnknownEPSS 0.65%

Last modified Jun 17, 2026

CVE-2018-0665 is a vulnerability of currently unknown severity. Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative user to embed arbitrary scripts to the configuration data through a certain form field of the configuration page, which may be executed on another administrative user's web browser. This is a different vulnerability from CVE-2018-0666.. EPSS estimates a 0.65% chance of exploitation in the next 30 days.

Description

Yamaha routers RT57i Rev.8.00.95 and earlier, RT58i Rev.9.01.51 and earlier, NVR500 Rev.11.00.36 and earlier, RTX810 Rev.11.01.31 and earlier, allow an administrative user to embed arbitrary scripts to the configuration data through a certain form field of the configuration page, which may be executed on another administrative user's web browser. This is a different vulnerability from CVE-2018-0666.

Metrics

EPSS Probability

0.65%

46.5th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Vendor	Product	Versions
Yamaha	Rt57i Firmware	<= rev.8.00.95
Yamaha	Rt58i Firmware	<= rev.9.01.51
Yamaha	Nvr500 Firmware	<= rev.11.00.36
Yamaha	Rtx810 Firmware	<= rev.11.01.31

References

http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN69967692.htmlThird Party Advisory
https://flets-w.com/solution/kiki_info/info/180829.htmlThird Party Advisory
https://jvn.jp/en/jp/JVN69967692/index.htmlThird Party Advisory
https://web116.jp/ced/support/news/contents/2018/20180829b.htmlThird Party Advisory
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN69967692.htmlThird Party Advisory
https://flets-w.com/solution/kiki_info/info/180829.htmlThird Party Advisory
https://jvn.jp/en/jp/JVN69967692/index.htmlThird Party Advisory
https://web116.jp/ced/support/news/contents/2018/20180829b.htmlThird Party Advisory

Timeline

Published: Jan 9, 2019
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2018-0665?

How severe is CVE-2018-0665?

Severity scoring for CVE-2018-0665 is pending analysis. The EPSS model estimates a 0.65% probability of exploitation in the next 30 days.

How do I fix CVE-2018-0665?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2018-0665?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST