CVE-2018-16201

N/A

Description

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands.

CVE Details

CVSS v3.1 ScoreN/A

Published1/9/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

toshiba:hem-gw16atoshiba:hem-gw16a_firmwaretoshiba:hem-gw26atoshiba:hem-gw26a_firmware

Weaknesses (CWE)

CWE-798

References

http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm(vultures@jpcert.or.jp)

https://jvn.jp/en/jp/JVN99810718/index.html(vultures@jpcert.or.jp)

http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm(af854a3a-2127-422b-91ae-364da2661108)

https://jvn.jp/en/jp/JVN99810718/index.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.