PT-2017-15284

CVE-2017-2235

·

Publicado

2017-07-07

·

Atualizado

2020-08-24

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Toshiba Home gateway HEM-GW16A versions HEM-GW16A-FW-V1.2.0 and earlier Toshiba Home gateway HEM-GW26A versions HEM-GW26A-FW-V1.2.0 and earlier
Description The issue allows an attacker to bypass access restrictions and change the administrator account password. This is achieved via unspecified vectors, potentially allowing unauthorized access to the system.
Recommendations For Toshiba Home gateway HEM-GW16A versions HEM-GW16A-FW-V1.2.0 and earlier, update to a version later than HEM-GW16A-FW-V1.2.0 to resolve the issue. For Toshiba Home gateway HEM-GW26A versions HEM-GW26A-FW-V1.2.0 and earlier, update to a version later than HEM-GW26A-FW-V1.2.0 to resolve the issue.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
CVE-2017-2235
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com