CVE-2017-2235

Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to change the administrator account password via unspecified vectors.

Score

CVSS 3.0 9.8 Critical

Status

Modified - vultures@jpcert.or.jp

Published

2017-07-07

Last modified

2024-08-05

Affected products

• Hem-gw16a Firmware (Toshiba)
• Hem-gw26a Firmware (Toshiba)
• Toshiba Home Gateway Hem-gw16a (Toshiba Lighting Technology Corporation)
• Toshiba Home Gateway Hem-gw26a (Toshiba Lighting Technology Corporation)

References

• http://jvn.jp/en/jp/JVN85901441/index.html