Security Flaw in Toshiba Home Gateway Models and Configuration Access

CVE-2018-16201

Summary

The Toshiba Home Gateway models HEM-GW16A and HEM-GW26A, running firmware version 1.2.9 and earlier, have been found to use hard-coded credentials for their administrative settings. This security flaw may enable an attacker on the same local network to gain unauthorized access to the administration panel, allowing them to alter device configurations or execute arbitrary operating system commands, which can pose significant risks to network security.

References