{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-25T10:03:25.911","vulnerabilities":[{"cve":{"id":"CVE-2016-4863","sourceIdentifier":"vultures@jpcert.or.jp","published":"2017-05-22T16:29:00.217","lastModified":"2025-04-20T01:37:25.860","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Class 10 model W-02 with firmware version 2.00.02 and later, FlashAir SD-WE series Class 10 model W-03, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir II Class 10 model W-02 series with firmware version 2.00.02 and later, FlashAir III Class 10 model W-03 series, FlashAir Class 6 model with firmware version 1.00.04 and later, FlashAir W-02 series Class 10 model with firmware version 2.00.02 and later, FlashAir W-03 series Class 10 model does not require authentication on accepting a connection from STA side LAN when \"Internet pass-thru Mode\" is enabled, which allows attackers with access to STA side LAN can obtain files or data."},{"lang":"es","value":"El FlashAir SD-WD/WC serie Clase 6  modelo con versión de firmware 1.00.04 y posterior, FlashAir SD- WD/WC serie Clase 10 modelo W-02 con versión de firmware  2.00.02 y posterior, FlashAir SD-WE serie Clase 10 modelo W-03, FlashAir Clase 6 modelo con versión de firmware 1.00.04 y posterior, FlashAir II Clase 10 modelo W-02 serie con versión de firmware  2.00.02 y posterior, FlashAir III Clase 10 modelo W-03 serie, FlashAir Clase 6 modelo con versión de firmware  1.00.04 y posterior, FlashAir W-02 serie Clase 10 modelo con versión de firmware  2.00.02 y posterior,  FlashAir W-03 serie clase 10 el modelo de Toshiba,  no requieren la autenticación al aceptar una conexión de LAN del lado STA cuando se habilita el \"Internet pass-thru Mode\", que permite que los atacantes con acceso a LAN del lado STA puedan obtener archivos o datos."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":4.3,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:A/AC:L/Au:N/C:P/I:N/A:N","baseScore":3.3,"accessVector":"ADJACENT_NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"LOW","exploitabilityScore":6.5,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-287"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*","versionEndIncluding":"1.00.03","matchCriteriaId":"CBA7647D-DB43-4DD7-89B4-02CD310B8F5B"},{"vulnerable":true,"criteria":"cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*","versionEndIncluding":"1.00.04","matchCriteriaId":"A3E68A5E-C899-484D-87EA-F52414B66968"},{"vulnerable":true,"criteria":"cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*","versionEndIncluding":"1.00.06","matchCriteriaId":"8288D17C-1CE9-4B38-81C4-9C702E5800D9"},{"vulnerable":true,"criteria":"cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"C0CE8592-61C3-4F18-9398-3F9C2F5531A4"},{"vulnerable":true,"criteria":"cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*","versionEndIncluding":"2.00.03","matchCriteriaId":"E7DB5458-E52B-497D-8B09-040FCDB13B78"},{"vulnerable":true,"criteria":"cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*","versionEndIncluding":"3.00.01","matchCriteriaId":"48762E2F-044E-43C6-8221-FBFBA9C8E7E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:toshiba:flashair:*:*:*:*:*:*:*:*","versionEndIncluding":"3.0.2","matchCriteriaId":"C182FF61-0D00-4AE6-94CD-38BBB47050D5"}]}]}],"references":[{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000168","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/93479","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://jvn.jp/en/jp/JVN39619137/index.html","source":"vultures@jpcert.or.jp","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://jvndb.jvn.jp/jvndb/JVNDB-2016-000168","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/93479","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://jvn.jp/en/jp/JVN39619137/index.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"]}]}}]}