CVE-2017-2236
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-07-07
- Last modified
- 2024-08-05
- Weaknesses
- CWE-798
Affected products
- Hem-gw16a Firmware (Toshiba)
- Hem-gw26a Firmware (Toshiba)
- Toshiba Home Gateway Hem-gw16a (Toshiba Lighting Technology Corporation)
- Toshiba Home Gateway Hem-gw26a (Toshiba Lighting Technology Corporation)
References
- http://jvn.jp/en/jp/JVN85901441/index.html
