PT-2017-15284 · Toshiba · Toshiba Home Gateway Hem-Gw16A+1

Yutaka Kokubu · Publicado 2017-07-07 · Atualizado 2020-08-24 · CVE-2017-2235

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Toshiba Home gateway HEM-GW16A versions HEM-GW16A-FW-V1.2.0 and earlier Toshiba Home gateway HEM-GW26A versions HEM-GW26A-FW-V1.2.0 and earlier

Description The issue allows an attacker to bypass access restrictions and change the administrator account password. This is achieved via unspecified vectors, potentially allowing unauthorized access to the system.

Recommendations For Toshiba Home gateway HEM-GW16A versions HEM-GW16A-FW-V1.2.0 and earlier, update to a version later than HEM-GW16A-FW-V1.2.0 to resolve the issue. For Toshiba Home gateway HEM-GW26A versions HEM-GW26A-FW-V1.2.0 and earlier, update to a version later than HEM-GW26A-FW-V1.2.0 to resolve the issue.

Correção

Identificadores relacionados

CVE-2017-2235

Produtos afetados

Toshiba Home Gateway Hem-Gw16A

Toshiba Home Gateway Hem-Gw26A

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-2235 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-2235 · Nota de Segurança
• http://jvn.jp/en/jp/JVN85901441/index.html · Nota