High severity8.8NVD Advisory· Published Jul 3, 2016· Updated Jun 17, 2026

CVE-2016-1228

Description

Cross-site request forgery (CSRF) vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the authentication of arbitrary users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ntt West/Pr 400mi
cpe:2.3:h:ntt-west:pr-400mi:-:*:*:*:*:*:*:*
Ntt East/Pr 400mi Firmware
cpe:2.3:o:ntt-east:pr-400mi_firmware:07.00.1006:*:*:*:*:*:*:*
Ntt East/Rt 400mi Firmware
cpe:2.3:o:ntt-east:rt-400mi_firmware:*:*:*:*:*:*:*:*
Range: <=07.00.1006
Ntt East/Rv 440mi Firmware
cpe:2.3:o:ntt-east:rv-440mi_firmware:*:*:*:*:*:*:*:*
Range: <=07.00.1006
Ntt West/Pr 400mi Firmware
cpe:2.3:o:ntt-west:pr-400mi_firmware:*:*:*:*:*:*:*:*
Range: <=07.00.1005
Ntt West/Rt 400mi Firmware
cpe:2.3:o:ntt-west:rt-400mi_firmware:*:*:*:*:*:*:*:*
Range: <=07.00.1005
Ntt West/Rv 440mi Firmware
cpe:2.3:o:ntt-west:rv-440mi_firmware:*:*:*:*:*:*:*:*
Range: <=07.00.1005
Ntt/Hikari Denwallm-fuzzy
Range: <= 07.00.1006 (EAST) / <= 07.00.1005 (WEST)

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN45034304/index.htmlnvdVendor Advisory
jvndb.jvn.jp/jvndb/JVNDB-2016-000106nvdThird Party AdvisoryVDB EntryVendor Advisory
web116.jp/ced/support/news/contents/2016/20160627.htmlnvdVendor Advisory
www.ntt-west.co.jp/kiki/support/flets/hgw4_mi/160627.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000