Vulnerability Details : CVE-2020-5548
Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210 firmware Rev.14.01.33 and earlier, RTX3500 firmware Rev.14.00.26 and earlier, and RTX5000 firmware Rev.14.00.26 and earlier), Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00.38 and earlier), and Yamaha Firewall(FWX120 firmware Rev.11.03.27 and earlier) allow remote attackers to cause a denial of service via unspecified vectors.
Vulnerability category: Denial of service
Products affected by CVE-2020-5548
- cpe:2.3:o:yamaha:nvr500_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:rtx810_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:rtx830_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:nvr510_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:nvr700w_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:rtx1210_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:rtx5000_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:rtx3500_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:fwx120_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:yamaha:rtx1200_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-5548
0.86%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 73 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-5548
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST | |
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
References for CVE-2020-5548
-
https://jvn.jp/en/jp/JVN38732359/index.html
JVN#38732359: Multiple Yamaha network devices vulnerable to denial-of-service (DoS)Third Party Advisory
-
http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/JVN38732359.html
FAQ for YAMAHA RT Series / SecurityMitigation;Vendor Advisory
Jump to