CVE-2017-2238: CSRF
Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-2238?
CVE-2017-2238 is classified as a medium severity vulnerability due to its potential for remote exploitation and CSRF attacks.
How do I fix CVE-2017-2238?
To remediate CVE-2017-2238, upgrade the Toshiba Home gateway firmware to versions later than HEM-GW16A-FW-V1.2.0 and HEM-GW26A-FW-V1.2.0.
What types of devices are affected by CVE-2017-2238?
CVE-2017-2238 affects Toshiba Home gateways HEM-GW16A and HEM-GW26A running firmware versions HEM-GW16A-FW-V1.2.0 and HEM-GW26A-FW-V1.2.0 or earlier.
Can CVE-2017-2238 lead to unauthorized access?
Yes, CVE-2017-2238 allows remote attackers to hijack the authentication of administrators, potentially leading to unauthorized access.
What is the nature of the attack in CVE-2017-2238?
CVE-2017-2238 involves a cross-site request forgery (CSRF) vulnerability that exploits the trust a web application has in the user's browser.