PT-2019-9262 · Toshiba · Toshiba Home Gateway Hem-Gw16A+1

Daiki Ichinose + 2 · Published 2019-01-09 · Updated 2019-10-03 · CVE-2018-16197

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Toshiba Home gateway HEM-GW16A versions 1.2.9 and earlier Toshiba Home gateway HEM-GW26A versions 1.2.9 and earlier

Description The issue allows an attacker on the same network segment to bypass access restrictions, potentially accessing information and files stored on the affected device.

Recommendations For Toshiba Home gateway HEM-GW16A versions 1.2.9 and earlier, update to a version later than 1.2.9 to resolve the issue. For Toshiba Home gateway HEM-GW26A versions 1.2.9 and earlier, update to a version later than 1.2.9 to resolve the issue.

Fix

Related Identifiers

CVE-2018-16197

Affected Products

Toshiba Home Gateway Hem-Gw16A

Toshiba Home Gateway Hem-Gw26A

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-16197 · Security Note
• https://osv.dev/vulnerability/CVE-2018-16197 · Vendor Advisory
• http://tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm · Vendor Advisory
• https://jvn.jp/en/jp/JVN99810718/index.html · Note