CVE-2016-4863: Medium severity toshiba flashair vulnerability
The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Class 10 model W-02 with firmware version 2.00.02 and later, FlashAir SD-WE series Class 10 model W-03, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir II Class 10 model W-02 series with firmware version 2.00.02 and later, FlashAir III Class 10 model W-03 series, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir W-02 series Class 10 model with firmware version 2.00.02 and later, FlashAir W-03 series Class 10 model does not require authentication on accepting a connection from STA side LAN when "Internet pass-thru Mode" is enabled, which allows attackers with access to STA side LAN can obtain files or data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4863?
CVE-2016-4863 has been classified as a moderate severity vulnerability.
How do I fix CVE-2016-4863?
To address CVE-2016-4863, users should update their Toshiba FlashAir products to the latest firmware version.
Which Toshiba FlashAir models are affected by CVE-2016-4863?
The affected models include various FlashAir SD-WD/WC series and FlashAir II devices with specific firmware versions.
Can CVE-2016-4863 lead to unauthorized access?
Yes, CVE-2016-4863 may allow unauthorized access to the contents of the affected FlashAir SD cards.
Is there a known exploit for CVE-2016-4863?
As of now, there are no publicly documented exploits specifically targeting CVE-2016-4863.