PT-2017-15284

CVE-2017-2235

·

Published

2017-07-07

·

Updated

2020-08-24

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Toshiba Home gateway HEM-GW16A versions HEM-GW16A-FW-V1.2.0 and earlier Toshiba Home gateway HEM-GW26A versions HEM-GW26A-FW-V1.2.0 and earlier
Description The issue allows an attacker to bypass access restrictions and change the administrator account password. This is achieved via unspecified vectors, potentially allowing unauthorized access to the system.
Recommendations For Toshiba Home gateway HEM-GW16A versions HEM-GW16A-FW-V1.2.0 and earlier, update to a version later than HEM-GW16A-FW-V1.2.0 to resolve the issue. For Toshiba Home gateway HEM-GW26A versions HEM-GW26A-FW-V1.2.0 and earlier, update to a version later than HEM-GW26A-FW-V1.2.0 to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Related identifiers
CVE-2017-2235
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com