Read the docs

Toshiba Lighting & Technology Corporation

Records31All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Toshiba Lighting & Technology Corporation records in CISA KEV

No Toshiba Lighting & Technology Corporation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Hem-gw16a Firmware 10 records MEDIUM Hem-gw26a Firmware 10 records MEDIUM Bluetooth Stack 4 records MEDIUM Flashair 4 records MEDIUM 4690 Operating System 1 record LOW Acpi Flash Bios 1 record LOW Bluetooth 1 record MEDIUM Bluetooth Wireless Device Driver 1 record LOW

Records

10 records in Hem-gw26a Firmware · all components

TI-2017-01526 CVE-2017-2236 · GHSA-r7x4-j9wp-w9hg

Hard-coded credentials in Toshiba Home gateway HEM-GW16A

Priority MEDIUM 45

Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operation…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0142 Published 2017-07-07 No fix listed CWE-798
TI-2018-11598 CVE-2018-16201 · GHSA-rj5g-89w5-w44j

Hard-coded credentials in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway…

Priority LOW 39

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators setti…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00602 Published 2019-01-09 No fix listed CWE-798
TI-2017-01528 CVE-2017-2238 · GHSA-ccw8-5g82-g89h

Cross-site request forgery in Toshiba Home gateway HEM-GW16A

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attacke…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00769 Published 2017-07-07 No fix listed CWE-352
TI-2018-11596 CVE-2018-16199 · GHSA-hjj3-8r8h-hxfh

Cross-site scripting in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A

Priority LOW 29

Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attacker to inject arbitrary web script or HTML via unspecified ve…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2019-01-09 No fix listed CWE-79
TI-2018-11594 CVE-2018-16197 · GHSA-h36g-mqj9-c9h2

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9…

Priority LOW 29

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00503 Published 2019-01-09 No fix listed
Open these records in search →