Approved changes feed: RSS · Atom

cpe:2.3:o:toshiba:hem-gw26a_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorToshiba (3a2095e8-27ea-549e-ab6f-2b82ea29af9e)
ProductHem Gw26A Firmware (1c1d061e-c69b-5217-aa5f-ac179f835128)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16201 vulnerable 2026-06-03 14:38:20.099117 Details available
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-coded credentials, which may allow an attacker on the same network segment to login to the administrators settings screen and change the configuration or execute arbitrary OS commands.
Published: 2019-01-09T22:00:00.000Z
Updated: 2024-08-05T10:17:38.280Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16200 vulnerable 2026-06-03 14:38:20.098740 Details available
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to execute arbitrary OS commands.
Published: 2019-01-09T22:00:00.000Z
Updated: 2024-08-05T10:17:38.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16199 vulnerable 2026-06-03 14:38:20.098384 Details available
Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attacker to inject arbitrary web script or HTML via unspecified vectors.
Published: 2019-01-09T22:00:00.000Z
Updated: 2024-08-05T10:17:38.382Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16198 vulnerable 2026-06-03 14:38:20.098001 Details available
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow an attacker on the same network segment to access a non-documented developer screen to perform operations on the affected device.
Published: 2019-01-09T22:00:00.000Z
Updated: 2024-08-05T10:17:38.374Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16197 vulnerable 2026-06-03 14:38:20.097024 Details available
Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to bypass access restriction to access the information and files stored on the affected device.
Published: 2019-01-09T22:00:00.000Z
Updated: 2024-08-05T10:17:38.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2238 vulnerable 2026-06-03 14:37:07.060936 Details available
Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier and Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Published: 2017-07-07T13:00:00.000Z
Updated: 2024-08-05T13:48:05.058Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2237 vulnerable 2026-06-03 14:37:07.060040 Details available
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
Published: 2017-07-07T13:00:00.000Z
Updated: 2024-08-05T13:48:04.355Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2236 vulnerable 2026-06-03 14:37:07.059661 Details available
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges.
Published: 2017-07-07T13:00:00.000Z
Updated: 2024-08-05T13:48:05.063Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2235 vulnerable 2026-06-03 14:37:07.059110 Details available
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to change the administrator account password via unspecified vectors.
Published: 2017-07-07T13:00:00.000Z
Updated: 2024-08-05T13:48:04.342Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-2234 vulnerable 2026-06-03 14:37:07.058065 Details available
Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen to perform operations on device with administrative privileges.
Published: 2017-07-07T13:00:00.000Z
Updated: 2024-08-05T13:48:04.501Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.