CVE-2018-16197

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on the affected device.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
ADJACENT_NETWORK
LOW
NONE
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
jpcertCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 27%
VendorProductVersion
toshibahem-gw16a_firmware
𝑥
≤ 1.2.9
toshibahem-gw26a_firmware
𝑥
≤ 1.2.9
𝑥
= Vulnerable software versions
References
http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm
https://jvn.jp/en/jp/JVN99810718/index.html
http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm
https://jvn.jp/en/jp/JVN99810718/index.html