PatchTheCVEtoshiba vulnerabilities
Recent CVEs affecting toshiba products. 21 tracked.
toshiba has 21 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 18. Most recent: 2020-04-20. Highest priority: CVE-2017-2237 (score 59/100).
- CVE-2020-5569 HIGH 8.4 UPGRADE An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier
- CVE-2018-16201 HIGH 8.8 UPGRADE UPGRADE Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier uses hard-c
- CVE-2018-16200 HIGH 8.8 UPGRADE UPGRADE Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an a
- CVE-2018-16199 MEDIUM 6.1 UPGRADE UPGRADE Cross-site scripting vulnerability in Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway H
- CVE-2018-16198 HIGH 8.8 UPGRADE UPGRADE Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier may allow a
- CVE-2018-16197 MEDIUM 6.5 UPGRADE UPGRADE Toshiba Home gateway HEM-GW16A 1.2.9 and earlier, Toshiba Home gateway HEM-GW26A 1.2.9 and earlier allows an a
- CVE-2017-2238 HIGH 8.8 UPGRADE UPGRADE Cross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0
- CVE-2017-2237 CRITICAL 9.8 UPGRADE UPGRADE Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier
- CVE-2017-2236 CRITICAL 9.8 UPGRADE UPGRADE Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmwa
- CVE-2017-2235 CRITICAL 9.8 UPGRADE UPGRADE Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier
- CVE-2017-2234 CRITICAL 9.8 UPGRADE UPGRADE Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM-GW26A firmwa
- CVE-2017-2162 MEDIUM 4.3 UPGRADE FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/
- CVE-2017-2161 LOW 3.5 UPGRADE FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/
- CVE-2017-2149 HIGH 8.8 UPGRADE Untrusted search path vulnerability in installers of the software for SDHC/SDXC Memory Card with embedded NFC
- CVE-2016-4863 MEDIUM 4.3 UPGRADE The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC
- CVE-2016-4840 MEDIUM 5.9 UPGRADE UPGRADE Coordinate Plus App for Android 1.0.2 and earlier and Coordinate Plus App for iOS 1.0.2 and earlier do not ver
- CVE-2015-0884 MEDIUM 6.9 MITIGATE UPGRADE Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Servic
- CVE-2014-4876 LOW 3.7 MITIGATE Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF logical name is not properly restricted, allows r
- CVE-2014-4875 MEDIUM 5.0 UPGRADE CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcoded
- CVE-2012-4981 HIGH 8.8 DOWNGRADE Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution Vulnerability
- CVE-2012-4980 HIGH 7.8 DOWNGRADE Multiple stack-based buffer overflows in CFProfile.exe in Toshiba ConfigFree Utility 8.0.38 allow user-assiste
FAQ
How do I fix toshiba vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is toshiba being exploited right now?
None of the tracked toshiba CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which toshiba CVE should I patch first?
CVE-2017-2237 currently ranks highest (59/100): Toshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier.