CVE Catalog
CVE-2017-2236
CriticalSummary
The Toshiba Home gateway HEM-GW16A and HEM-GW26A firmware contains hard-coded credentials, which may allow attackers to perform operations on the device with administrative privileges.
Risk Assessment
Exploitation of this vulnerability could lead to unauthorized access to the device, posing a significant threat to the security of the home network.
Recommendation
It is recommended to update the firmware to the latest version to eliminate hard-coded credentials and implement strong, unique passwords for each device.
Original NVD description (English source)
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges.