CVE-2018-16201: High severity toshiba hem-gw16a vulnerability
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16201?
CVE-2018-16201 is considered a critical vulnerability due to the use of hard-coded credentials that allow unauthorized access to administrative settings.
How do I fix CVE-2018-16201?
To fix CVE-2018-16201, users should update to a firmware version newer than 1.2.9 for the Toshiba Home gateways HEM-GW16A and HEM-GW26A.
What are the affected devices for CVE-2018-16201?
CVE-2018-16201 affects Toshiba Home gateway models HEM-GW16A and HEM-GW26A with firmware versions 1.2.9 and earlier.
What risks are posed by CVE-2018-16201?
CVE-2018-16201 allows attackers on the same network segment to access the admin panel and execute arbitrary commands, posing a significant security risk.
Who is impacted by CVE-2018-16201?
Individuals or organizations using the vulnerable Toshiba Home gateways HEM-GW16A and HEM-GW26A with outdated firmware versions are impacted by CVE-2018-16201.