Skip to content
OpenAdvisories
Unscored CVE-2017-2238 EUVD-2017-11421GHSA-ccw8-5g82-g89h

Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home…

Published Jul 7, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

VendorProductAffectedFixed
Toshiba Lighting & Technology Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier —
Toshiba Lighting & Technology Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier —

References