CVE-2016-4863 Auth bypass in FlashAir Class 6 model
Attackers on the local network can access files without authentication when Internet pass-thru Mode is enabled on Toshiba FlashAir SD cards.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-4863?
CVE-2016-4863 is a medium-severity authentication bypass vulnerability in Toshiba FlashAir Class 6 model, published on 22 May 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Class 10 model W-02 with firmware version 2.00.02 and later, FlashAir SD-WE series Class 10 model W-03, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir II Class 10 model W-02 series with firmware version 2.00.02 and later, FlashAir III Class 10 model W-03 series, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir W-02 series Class 10 model with firmware version 2.00.02 and later, FlashAir W-03 series Class 10 model does not require authentication on accepting a connection from STA side LAN when "Internet pass-thru Mode" is enabled, which allows attackers with access to STA side LAN can obtain files or data.
Weakness: CWE-287
Which versions are affected by CVE-2016-4863?
It affects 1 product.
Products include Toshiba Flashair.
How do I fix CVE-2016-4863?
No fix has been published for CVE-2016-4863 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2016-4863 being exploited?
There is no known exploitation of CVE-2016-4863 in the wild and no public exploit code.
Other vulnerabilities in Toshiba FlashAir Class 6 model
- CVE-2017-2149 Other in Installer for SDHC Memory Card with embedded TransferJetTM functionality Configuration Software
- CVE-2017-2162 Hardcoded credentials in FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>)
- CVE-2017-2161 Missing authorization in FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>)
Sources
Also known as GHSA-7wrq-vm6c-6qvc.