CVE:CVE-2019-5986
CNNVD:CNNVD-201906-1065
Nippon Telegraph and Telephone Hikari Denwa Phone Home Gateway是日报电信电话（Nippon Telegraph and Telephone）公司的一款为其光纤服务用户提供的IP电话服务。
Nippon Telegraph and Telephone Hikari Denwa Phone Home Gateway中存在跨站请求伪造漏洞。该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。以下产品及版本受到影响：使用19.41及之前版本固件的PR-S300NE/RT-S300NE/RV-S340NE；使用19.01.0005及之前版本固件的PR-S300HI/RT-S300HI/RV-S340HI；使用19.40及之前版本固件的PR-S300SE/RT-S300SE/RV-S340SE；使用7.42及之前版本固件的PR-400NE/RT-400NE/RV-440NE；使用07.00.1010及之前版本固件的PR-400KI/RT-400KI/RV-440KI；使用07.00.1012及之前版本固件的PR-400MI/RT-400MI/RV-440MI；使用01.00.0090及之前版本固件的PR-500KI/RT-500KI；使用01.00.0070及之前版本固件的RS-500KI；使用01.01.0014及之前版本固件的PR-500MI/RT-500MI；使用03.01.0019及之前版本固件的RS-500MI。
solution:Upgrade ntt-east pr-s300ne_firmware to a higher version than 19.41,and avoid the version (,19.41]; Upgrade ntt-east rt-s300ne_firmware to a higher version than 19.41,and avoid the version (,19.41]; Upgrade ntt-east rv-s340ne_firmware to a higher version than 19.41,and avoid the version (,19.41]; Upgrade ntt-east pr-s300hi_firmware to a higher version than 19.01.0005,and avoid the version (,19.01.0005]; Upgrade ntt-east rt-s300hi_firmware to a higher version than 19.01.0005,and avoid the version (,19.01.0005]; Upgrade ntt-east rv-s340hi_firmware to a higher version than 19.01.0005,and avoid the version (,19.01.0005]; Upgrade ntt-east pr-s300se_firmware to a higher version than 19.40,and avoid the version (,19.40]; Upgrade ntt-east rt-s300se_firmware to a higher version than 19.40,and avoid the version (,19.40]; Upgrade ntt-east rv-s340se_firmware to a higher version than 19.40,and avoid the version (,19.40]; Upgrade ntt-east pr-400ne_firmware to a higher version than 7.42,and avoid the version (,7.42]; Upgrade ntt-east rt-400ne_firmware to a higher version than 7.42,and avoid the version (,7.42]; Upgrade ntt-east rv-440ne_firmware to a higher version than 7.42,and avoid the version (,7.42]; Upgrade ntt-east pr-400ki_firmware to a higher version than 07.00.1010,and avoid the version (,07.00.1010]; Upgrade ntt-east rt-400ki_firmware to a higher version than 07.00.1010,and avoid the version (,07.00.1010]; Upgrade ntt-east rv-440ki_firmware to a higher version than 07.00.1010,and avoid the version (,07.00.1010]; Upgrade ntt-east pr-400mi_firmware to a higher version than 07.00.1012,and avoid the version (,07.00.1012]; Upgrade ntt-east rt-400mi_firmware to a higher version than 07.00.1012,and avoid the version (,07.00.1012]; Upgrade ntt-east rv-440mi_firmware to a higher version than 07.00.1012,and avoid the version (,07.00.1012]; Upgrade ntt-east pr-500ki_firmware to a higher version than 01.00.0090,and avoid the version (,01.00.0090]; Upgrade ntt-east rt-500ki_firmware to a higher version than 01.00.0090,and avoid the version (,01.00.0090]; Upgrade ntt-east rs-500ki_firmware to a higher version than 01.00.0070,and avoid the version (,01.00.0070]; Upgrade ntt-east pr-500mi_firmware to a higher version than 01.01.0014,and avoid the version (,01.01.0014]; Upgrade ntt-east rt-500mi_firmware to a higher version than 01.01.0014,and avoid the version (,01.01.0014]; Upgrade ntt-east rs-500mi_firmware to a higher version than 03.01.0019,and avoid the version (,03.01.0019]; Upgrade ntt-west pr-s300ne_firmware to a higher version than 19.41,and avoid the version (,19.41]; Upgrade ntt-west rt-s300ne_firmware to a higher version than 19.41,and avoid the version (,19.41]; Upgrade ntt-west rv-s340ne_firmware to a higher version than 19.41,and avoid the version (,19.41]; Upgrade ntt-west pr-s300hi_firmware to a higher version than 19.01.0005,and avoid the version (,19.01.0005]; Upgrade ntt-west rt-s300hi_firmware to a higher version than 19.01.0005,and avoid the version (,19.01.0005]; Upgrade ntt-west rv-s340hi_firmware to a higher version than 19.01.0005,and avoid the version (,19.01.0005]; Upgrade ntt-west pr-s300se_firmware to a higher version than 19.40,and avoid the version (,19.40]; Upgrade ntt-west rt-s300se_firmware to a higher version than 19.40,and avoid the version (,19.40]; Upgrade ntt-west rv-s340se_firmware to a higher version than 19.40,and avoid the version (,19.40]; Upgrade ntt-west pr-400ne_firmware to a higher version than 7.42,and avoid the version (,7.42]; Upgrade ntt-west rt-400ne_firmware to a higher version than 7.42,and avoid the version (,7.42]; Upgrade ntt-west rv-440ne_firmware to a higher version than 7.42,and avoid the version (,7.42]; Upgrade ntt-west pr-400ki_firmware to a higher version than 07.00.1010,and avoid the version (,07.00.1010]; Upgrade ntt-west rt-400ki_firmware to a higher version than 07.00.1010,and avoid the version (,07.00.1010]; Upgrade ntt-west rv-440ki_firmware to a higher version than 07.00.1010,and avoid the version (,07.00.1010]; Upgrade ntt-west pr-400mi_firmware to a higher version than 07.00.1012,and avoid the version (,07.00.1012]; Upgrade ntt-west rt-400mi_firmware to a higher version than 07.00.1012,and avoid the version (,07.00.1012]; Upgrade ntt-west rv-440mi_firmware to a higher version than 07.00.1012,and avoid the version (,07.00.1012]; Upgrade ntt-west pr-500ki_firmware to a higher version than 01.00.0090,and avoid the version (,01.00.0090]; Upgrade ntt-west rt-500ki_firmware to a higher version than 01.00.0090,and avoid the version (,01.00.0090]; Upgrade ntt-west pr-500mi_firmware to a higher version than 01.01.0011,and avoid the version (,01.01.0011]; Upgrade ntt-west rt-500mi_firmware to a higher version than 01.01.0011,and avoid the version (,01.01.0011]