CVE-2017-2238
Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - vultures@jpcert.or.jp
- Published
- 2017-07-07
- Last modified
- 2024-08-05
- Weaknesses
- CWE-352
Affected products
- Hem-gw16a Firmware (Toshiba)
- Hem-gw26a Firmware (Toshiba)
- Toshiba Home Gateway Hem-gw16a (Toshiba Lighting Technology Corporation)
- Toshiba Home Gateway Hem-gw26a (Toshiba Lighting Technology Corporation)
References
- http://jvn.jp/en/jp/JVN85901441/index.html
