CVE Catalog
CVE-2017-2235
CriticalSummary
Toshiba Home gateway HEM-GW16A and HEM-GW26A firmware versions V1.2.0 and earlier allow an attacker to bypass access restrictions to change the administrator account password.
Risk Assessment
The ability to change the administrator account password poses a serious risk of device takeover, potentially leading to further attacks on the local network.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and implement additional security measures.
Original NVD description (English source)
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to change the administrator account password via unspecified vectors.