// For flags

CVE-2017-2236

 

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges.

Toshiba Home gateway HEM-GW16A con versiones de firmware HEM-GW16A-FW-V1.2.0 y anteriores y Toshiba Home gateway HEM-GW26A con versiones de firmware HEM-GW26A-FW-V1.2.0 y anteriores emplea credenciales embebidas, lo que podrĂ­a permitir que atacantes puedan realizar operaciones en el dispositivo con privilegios de administrador.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-12-01 CVE Reserved
  • 2017-07-07 CVE Published
  • 2024-03-19 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-798: Use of Hard-coded Credentials
CAPEC
References (1)
URL Tag Source
http://jvn.jp/en/jp/JVN85901441/index.html Third Party Advisory
URL Date SRC
URL Date SRC
URL Date SRC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Toshiba
Search vendor "Toshiba"
Hem-gw16a Firmware
Search vendor "Toshiba" for product "Hem-gw16a Firmware"
<= 1.2.0
Search vendor "Toshiba" for product "Hem-gw16a Firmware" and version " <= 1.2.0"
-
Affected
in Toshiba
Search vendor "Toshiba"
Hem-gw16a
Search vendor "Toshiba" for product "Hem-gw16a"
--
Safe
Toshiba
Search vendor "Toshiba"
Hem-gw26a Firmware
Search vendor "Toshiba" for product "Hem-gw26a Firmware"
<= 1.2.0
Search vendor "Toshiba" for product "Hem-gw26a Firmware" and version " <= 1.2.0"
-
Affected
in Toshiba
Search vendor "Toshiba"
Hem-gw26a
Search vendor "Toshiba" for product "Hem-gw26a"
--
Safe