CVE-2024-47044: Nippon Telegraph And Telephone East Corporation Hikari Denwa Router Pr-400mi

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION are vulnerable to insufficient access restrictions for Device Setting pages. If this vulnerability is exploited, an attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Note that, the same products are also provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION, but the vulnerability only affects products subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas.

Affected products

• Nippon Telegraph And Telephone East Corporation Hikari Denwa Router Pr-400mi: up to and including 09.00.0015
• Nippon Telegraph And Telephone East Corporation Hikari Denwa Router Rt-400mi: up to and including 09.00.0015
• Nippon Telegraph And Telephone East Corporation Hikari Denwa Router RV-440mi: up to and including 09.00.0015
• Nippon Telegraph And Telephone East Corporation Home Gateway/hikari Denwa Router Pr-500mi/rs-500mi/rt-500mi: up to and including 08.00.0004
• Nippon Telegraph And Telephone East Corporation Home Gateway/hikari Denwa Router Pr-600mi/rx-600mi: up to and including 01.00.0008
• Ntt-East Rt-500mi Firmware: up to and including 08.00.0004
• Ntt-East RV-440mi Firmware: up to and including 09.00.0015
• Ntt-East Rx-600mi Firmware: up to and including 01.00.0008

Published 2024-09-26. Last modified 2026-06-17.