Denial of Service Vulnerability in Yamaha VoIP and VPN Routers
CVE-2020-5548

7.5HIGH

Key Information:

Vendor
CVE Published:
1 April 2020

What is CVE-2020-5548?

Certain Yamaha routers are susceptible to a denial of service attack that can be exploited by remote attackers. This vulnerability allows an attacker to disrupt the service of affected devices, potentially leading to network outages and compromised communication functionalities. The affected models include various iterations of Yamaha's LTE, Gigabit VoIP, and VPN routers, as well as their firewall solutions. Users are advised to review their firmware versions and apply security updates to mitigate the risk.

Affected Version(s)

Yamaha network devices Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210 firmware Rev.14.01.33 and earlier, RTX3500 firmware Rev.14.00.26 and earlier, and RTX5000 firmware Rev.14.00.26 and earlier), Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00.38 and earlier), and Yamaha Firewall(FWX120 firmware Rev.11.03.27 and earlier)

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.