medium6.1
CVE-2018-16199
Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attac…
Impact
Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an remote attacker to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toshiba | Hem-Gw16a Firmware | through 1.2.9 |
| Toshiba | Hem-Gw26a Firmware | through 1.2.9 |