CVE-2017-2162

MEDIUM

FlashAirTM - Default Credentials

Title source: llm

Description

FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser.

Scores

CVSS v3 4.3
EPSS 0.0011
EPSS Percentile 30.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (3)
toshiba/flashair < 2.00.04
Toshiba Corporation/FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) < V3.00.02 and earlier
Toshiba Corporation/FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) < V2.00.04 and earlier
Published May 22, 2017
Tracked Since Feb 18, 2026