High severity · published Apr 1, 2020
CVE-2020-5548
Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware…
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210 firmware Rev.14.01.33 and earlier, RTX3500 firmware Rev.14.00.26 and earlier, and RTX5000 firmware Rev.14.00.26 and earlier), Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00.38 and earlier), and Yamaha Firewall(FWX120 firmware Rev.11.03.27 and earlier) allow remote attackers to cause a denial of service via unspecified vectors.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FF
Fwx120 Firmware · Yamaha
through 11.03.27 · source: NVD
NF
Nvr500 Firmware · Yamaha
through 11.00.38 · source: NVD
NF
Nvr510 Firmware · Yamaha
through 15.01.14 · source: NVD
NF
Nvr700w Firmware · Yamaha
through 15.00.15 · source: NVD
RF
Rtx1200 Firmware · Yamaha
through 10.01.76 · source: NVD
RF
Rtx1210 Firmware · Yamaha
through 14.01.33 · source: NVD
RF
Rtx3500 Firmware · Yamaha
through 14.00.26 · source: NVD
RF
Rtx5000 Firmware · Yamaha
through 14.00.26 · source: NVD
RF
Rtx810 Firmware · Yamaha
through 11.01.33 · source: NVD
RF
Rtx830 Firmware · Yamaha
through 15.02.09 · source: NVD