CVE-2018-16201

N/A

Description

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands.

Details CVE

Score CVSS v3.1N/A

Publie1/9/2019

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

toshiba:hem-gw16atoshiba:hem-gw16a_firmwaretoshiba:hem-gw26atoshiba:hem-gw26a_firmware

Faiblesses (CWE)

CWE-798

References

http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm(vultures@jpcert.or.jp)

https://jvn.jp/en/jp/JVN99810718/index.html(vultures@jpcert.or.jp)

http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm(af854a3a-2127-422b-91ae-364da2661108)

https://jvn.jp/en/jp/JVN99810718/index.html(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.