Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-2191 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:03.670Z Vendors: Sharp Corporation Products: RW-5100 driver installer for Windows 7, RW-5100 driver installer for Windows 8.1 Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99290 - http://jvn.jp/en/jp/JVN51274854/index.html
CVE ID: CVE-2017-2192 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:03.652Z Vendors: Sharp Corporation Products: RW-5100 tool to verify execution environment for Windows 7, RW-5100 tool to verify execution environment for Windows 8.1 Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and RW-5100 tool to verify execution environment for Windows 8.1 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.security
se DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99290 - http://jvn.jp/en/jp/JVN51274854/index.html
CVE ID: CVE-2017-2193 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:03.643Z Vendors: TeraTerm Project Products: The installer of Tera Term Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98807 - http://jvn.jp/en/jp/JVN06770361/index.html - https://ttssh2.osdn.jp/SA/JVN06770361.html.en
CVE ID: CVE-2017-2194 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:03.713Z Vendors: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Products: Source code security studying tool iCodeChecker Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ipa.go.jp/security/vuln/iCodeChecker/ - https://jvn.jp/en/jp/JVN25078144/index.html
CVE ID: CVE-2017-2195 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:03.618Z Vendors: Eric Teubert Products: Multi Feed Reader Problem Types: SQL Injection Description: SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/multi-feed-reader/#developers - http://jvn.jp/en/jp/JVN98617234/index.html - https://wpvulndb.com/vulnerabilities/8844
CVE ID: CVE-2017-2206 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:04.339Z Vendors: NetMove Corporation Products: The installer of SaAT Netizen Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.saat.jp/information/netizen/2017/0531_security_update_info.php - https://jvn.jp/en/jp/JVN91170929/index.html - http://www.securityfocus.com/bid/98817
CVE ID: CVE-2017-2207 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:04.201Z Vendors: NetMove Corporation Products: The installer of SaAT Personal Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of SaAT Personal ver.1.0.10.272 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN08020381/index.html - http://www.securityfocus.com/bid/98809 - https://www.saat.jp/information/personal/2017/0531_security_update_info.php
CVE ID: CVE-2017-2208 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.306Z Vendors: Acquisition, Technology & Logistics Agency Products: Installer of electronic tendering and bid opening system Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of Electronic tendering and bid opening system available prior to June 12, 2017 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html - https://jvn.jp/en/jp/JVN27198823/index.htm
iner: References: - http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html - https://jvn.jp/en/jp/JVN27198823/index.html
CVE ID: CVE-2017-2209 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:04.459Z Vendors: Ministry of the Environment Products: Installer of Houkokusyo Sakusei Shien Tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 (For the first installation) (The version which was available on the website from 2017 April 4 to 2017 May 18) and ver2.0 and later (For the first installation) (The versions which were available on the website prior to 2017 April 4) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst
17 April 4) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://ghg-santeikohyo.env.go.jp/files/system/report_20170529_rev.pdf - http://ghg-santeikohyo.env.go.jp/tool - https://jvn.jp/en/jp/JVN24087303/index.html - http://ghg-santeikohyo.env.go.jp/files/system/report_20170526.pdf
CVE ID: CVE-2017-2210 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:04.340Z Vendors: Geospatial Information Authority of Japan (GSI) Products: PatchJGD (PatchJGD101.EXE) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52691241/index.html - http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html
CVE ID: CVE-2017-2211 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:05.020Z Vendors: Geospatial Information Authority of Japan (GSI) Products: PatchJGD (Hyoko) (PatchJGDh101.EXE) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52691241/index.html - http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html
CVE ID: CVE-2017-2212 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:04.330Z Vendors: Geospatial Information Authority of Japan (GSI) Products: TKY2JGD (TKY2JGD1379.EXE) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52691241/index.html - http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html
CVE ID: CVE-2017-2213 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:04.423Z Vendors: Geospatial Information Authority of Japan (GSI) Products: SemiDynaEXE (SemiDynaEXE2008.EXE) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in SemiDynaEXE (SemiDynaEXE2008.EXE) ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN52691241/index.html - http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html
CVE ID: CVE-2017-2214 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:04.408Z Vendors: JIRANSOFT JAPAN, INC. Products: AppCheck, AppCheck Pro Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN99737748/index.html
CVE ID: CVE-2017-2215 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.309Z Vendors: National Tax Agency Products: Installer of "Setup file of advance preparation" (jizen_setup.exe) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of "Setup file of advance preparation" (jizen_setup.exe) (The version which was available on the website prior to 2017 June 12) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN34508179/index.html - http://www.e-tax.nta.go.jp/topics/topics_29
ogram Container: References: - https://jvn.jp/en/jp/JVN34508179/index.html - http://www.e-tax.nta.go.jp/topics/topics_290525.htm - https://www.keisan.nta.go.jp/oshirase/h28info/201705.html
CVE ID: CVE-2017-2216 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.314Z Vendors: W3 Eden, Inc. Products: WordPress Download Manager Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1650075/ - https://jvn.jp/en/jp/JVN79738260/index.html - https://wordpress.org/plugins/download-manager/#developers
CVE ID: CVE-2017-2217 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.316Z Vendors: W3 Eden, Inc. Products: WordPress Download Manager Problem Types: Open Redirect Description: Open redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1650075/ - https://jvn.jp/en/jp/JVN79738260/index.html - https://wordpress.org/plugins/download-manager/#developers
CVE ID: CVE-2017-2218 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.370Z Vendors: Apple Products: Installer of QuickTime for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN94771799/index.html - https://support.apple.com/kb/DL837?viewlocale=en_US
CVE ID: CVE-2017-2219 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-05T13:48:04.941Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN31236539/index.html
CVE ID: CVE-2017-2220 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.372Z Vendors: INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Products: Installer of CASL II simulator(self-extract format) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of CASL II simulator (self-extract format) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.jitec.ipa.go.jp/1_20casl2/casl2dl_2017_01.html - https://jvn.jp/en/jp/JVN67305782/index.html
CVE ID: CVE-2017-2221 State: PUBLISHED Published: 2017-08-04T16:00:00 Last Updated: 2024-08-05T13:48:04.417Z Vendors: Baidu Japan Inc. Products: Installer of Baidu IME Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN17788774/index.html
CVE ID: CVE-2017-2222 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.323Z Vendors: Chad Butler Products: WP-Members Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-members/#developers - https://jvn.jp/en/jp/JVN51355647/index.html - https://plugins.trac.wordpress.org/changeset/1667369/#file12
CVE ID: CVE-2017-2223 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.443Z Vendors: I-O DATA DEVICE, INC. Products: TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC, TS-WPTCAM2 Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.iodata.jp/support/information/2017/camera201706/ - http
Analyst Notes: - CVE Program Container: References: - http://www.iodata.jp/support/information/2017/camera201706/ - http://www.securityfocus.com/bid/99144 - https://jvn.jp/en/jp/JVN65411235/index.html
CVE ID: CVE-2017-2224 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.362Z Vendors: Web-Dorado Products: Event Calendar WD Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/event-calendar-wd/#developers - https://wpvulndb.com/vulnerabilities/8859 - http://www.securityfocus.com/bid/99155 - https://plugins.trac.wordpress.org/changeset/1671891/#file313 - https://jvn.jp/en/jp/JVN73550134/index.html
CVE ID: CVE-2017-2225 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.480Z Vendors: Ministry of Education, Culture, Sports, Science and Technology (MEXT) Products: EbidSettingChecker.exe Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN01775119/index.html - http://portal.ebid.mext.go.jp/top/
CVE ID: CVE-2017-2226 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:05.073Z Vendors: National Tax Agency Products: Setup file of advance preparation for e-Tax software (WEB version) Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB version) (1.17.1) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99334 - http://jvn.jp/en/jp/JVN79451345/index.html
CVE ID: CVE-2017-2227 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.290Z Vendors: Charamin steering committee Products: The installer of Charamin OMP Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier, Version 1.2.0.0 Beta and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN09293613/index.html
CVE ID: CVE-2017-2228 State: PUBLISHED Published: 2017-08-18T13:00:00 Last Updated: 2024-08-05T13:48:04.314Z Vendors: Agency for Natural Resources and Energy of Ministry of Economy,Trade and Industry (METI) Products: Teikihoukokusho Sakuseishien Tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN53292345/index.html
CVE ID: CVE-2017-2229 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.314Z Vendors: National Institute for Land and Infrastructure Management Products: Douroshisetu Kihon Data Sakusei System Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.nilim-cdrw.jp/ - http://www.nilim-cdrw.jp/index_help.html - http://jvn.jp/en/jp/JVN20409270/index.html
CVE ID: CVE-2017-2230 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.401Z Vendors: National Institute for Land and Infrastructure Management Products: Douro Kouji Kanseizutou Check Program Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 (cdrw_checker_3.1.0.lzh) and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.nilim-cdrw.jp/ - http://jvn.jp/en/jp/JVN82120115/index.html - http://www.nilim-cdrw.jp/index_help.html
CVE ID: CVE-2017-2231 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:05.218Z Vendors: Ministry of Land, Infrastructure, Transport and Tourism, Japan Products: The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system, The self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017, The self-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, dis
elf-extracting archive including the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system Ver3.02 and earlier, distributed till June 20, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.mlit.go.jp/gobuild/gobuild_cals_sysv3.html - http://jvn.jp/en/jp/JVN06337557/index.html - http://www.mlit.go.jp/common/001189444.pdf
CVE ID: CVE-2017-2232 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.294Z Vendors: The Ministry of Justice Products: Installer of Shinseiyo Sogo Soft Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN23389212/index.html
CVE ID: CVE-2017-2233 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.376Z Vendors: The Ministry of Justice Products: Installer of PDF Digital Signature Plugin Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and earlier, distributed till June 29, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN45134765/index.html
CVE ID: CVE-2017-2234 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.501Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A, Toshiba Home gateway HEM-GW26A Problem Types: Hidden Functionality Description: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier may allow remote attackers to access a non-documented developer screen to perform operations on device with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85901441/index.html
CVE ID: CVE-2017-2235 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:04.342Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A, Toshiba Home gateway HEM-GW26A Problem Types: Fails to restrict access Description: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier allows an attacker to bypass access restriction to change the administrator account password via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85901441/index.html
CVE ID: CVE-2017-2236 State: PUBLISHED Published: 2017-07-07T13:00:00 Last Updated: 2024-08-05T13:48:05.063Z Vendors: Toshiba Lighting & Technology Corporation Products: Toshiba Home gateway HEM-GW16A, Toshiba Home gateway HEM-GW26A Problem Types: Use of Hard-coded Credentials Description: Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmware HEM-GW26A-FW-V1.2.0 and earlier uses hard-coded credentials, which may allow attackers to perform operations on device with administrative privileges. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN85901441/index.html