Skip to content
OpenAdvisories
Unscored CVE-2018-16201 EUVD-2018-8054GHSA-rj5g-89w5-w44j

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may a…

Published Jan 9, 2019 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands.

Affected products

VendorProductAffectedFixed
Toshiba Lighting & Technology Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A (Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier) —

References