CVE-2018-16201

Name of the Vulnerable Software and Affected Versions Toshiba Home gateway HEM-GW16A versions 1.2.9 and earlier Toshiba Home gateway HEM-GW26A versions 1.2.9 and earlier

Description The issue allows an attacker on the same network segment to login to the administrator's settings screen and change the configuration or execute arbitrary OS commands due to the use of hard-coded credentials.

Recommendations For Toshiba Home gateway HEM-GW16A versions 1.2.9 and earlier, consider changing the hard-coded credentials to unique and secure ones until a patch is available. For Toshiba Home gateway HEM-GW26A versions 1.2.9 and earlier, consider changing the hard-coded credentials to unique and secure ones until a patch is available.