CVE-2018-16201

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands.

Score

CVSS 3.0 8.8 High

Status

Modified - vultures@jpcert.or.jp

Published

2019-01-09

Last modified

2024-08-05

Weaknesses

CWE-798

Affected products

• Hem-gw16a Firmware (Toshiba)
• Hem-gw26a Firmware (Toshiba)
• Toshiba Home Gateway Hem-gw16a And Toshiba Home Gateway Hem-gw26a (Toshiba Lighting Technology Corporation)

References

• http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm
• https://jvn.jp/en/jp/JVN99810718/index.html