CVE-2018-16200 Information

Description

Toshiba Home gateway HEM-GW16A 1.2.9 and earlier Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an attacker on the same network segment to execute arbitrary OS commands.

CVSS Vector

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Reference

http://www.tlt.co.jp/tlt/information/seihin/notice/defect/20181219/20181219.htm https://jvn.jp/en/jp/JVN99810718/index.html

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.8