Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Toshiba Lighting & Technology Corporation Component: Hem-gw26a Firmware Clear all filters
TI-2018-11598 CVE-2018-16201 · GHSA-rj5g-89w5-w44j

Hard-coded credentials in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway…

Priority LOW 39

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators setti…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00602 Published 2019-01-09 No fix listed CWE-798
TI-2018-11596 CVE-2018-16199 · GHSA-hjj3-8r8h-hxfh

Cross-site scripting in Toshiba Home gateway HEM-GW16A and Toshiba Home gateway HEM-GW26A

Priority LOW 29

Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attacker to inject arbitrary web script or HTML via unspecified ve…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2019-01-09 No fix listed CWE-79
TI-2018-11594 CVE-2018-16197 · GHSA-h36g-mqj9-c9h2

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9…

Priority LOW 29

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on…

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00503 Published 2019-01-09 No fix listed
TI-2017-01528 CVE-2017-2238 · GHSA-ccw8-5g82-g89h

Cross-site request forgery in Toshiba Home gateway HEM-GW16A

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attacke…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00769 Published 2017-07-07 No fix listed CWE-352
TI-2017-01526 CVE-2017-2236 · GHSA-r7x4-j9wp-w9hg

Hard-coded credentials in Toshiba Home gateway HEM-GW16A

Priority MEDIUM 45

Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operation…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0142 Published 2017-07-07 No fix listed CWE-798