CVE:CVE-2018-16200
CNNVD:CNNVD-201812-810
TOSHIBA Home Gateway HEM-GW26A和TOSHIBA Home Gateway HEM-GW16A都是日本东芝（TOSHIBA）公司的家庭网关产品。
TOSHIBA Home Gateway HEM-GW26A 1.2.9及之前版本和TOSHIBA Home Gateway HEM-GW16A 1.2.9及之前版本中存在操作系统命令注入漏洞。攻击者可利用该漏洞在受影响的设备上执行任意操作系统命令。
solution:Upgrade toshiba hem-gw16a_firmware to a higher version than 1.2.9,and avoid the version (,1.2.9]; Upgrade toshiba hem-gw26a_firmware to a higher version than 1.2.9,and avoid the version (,1.2.9]