CVE-2017-2162

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-22 · updated 2026-06-17

Description

FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser.

Affected products

Toshiba Flashair: through 2.00.04; through 3.00.02

References

http://jvndb.jvn.jp/jvndb/JVNDB-2017-000091
http://www.toshiba-personalstorage.net/news/20170516a.htm
https://jvn.jp/en/jp/JVN81820501/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2017-000091
http://www.toshiba-personalstorage.net/news/20170516a.htm
https://jvn.jp/en/jp/JVN81820501/index.html

Get alerted when CVE-2017-2162 or the next vulnerability affects your stack