https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:04:35.614187+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-07254 cnvd-2017-07254 2026-10-03T16:04:35.697984+00:00 cnvd-2017-07254 https://cve.radiocsirt.org/vuln/euvd-2026-72053 EUVD-2026-72053 2026-10-03T16:04:35.698025+00:00 EUVD-2026-72053 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2162 fkie_cve-2017-2162 2026-10-03T16:04:35.698046+00:00

FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser.

 https://cve.radiocsirt.org/vuln/ghsa-hpj8-ph69-28m8 GHSA-hpj8-ph69-28m8 2026-10-03T16:04:35.698089+00:00

FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows default credentials to be set for wireless LAN connections to the product when enabling the PhotoShare function through a web browser.

 https://cve.radiocsirt.org/vuln/gsd-2017-2162 gsd-2017-2162 2026-10-03T16:04:35.698118+00:00 gsd-2017-2162 https://cve.radiocsirt.org/vuln/jvndb-2017-000091 jvndb-2017-000091 2026-10-03T16:04:35.698140+00:00

FlashAir by Toshiba Corporation is an SDHC memory card which provides wireless LAN access functions. FlashAir PhotoShare function enables to share the image data in a certain folder with other users as it switches the original wireless LAN connection set by FlashAir default to the wireless LAN connection for PhotoShare. When enabling PhotoShare with a mobile application (either for Android or iOS), the application prompts a user to set credentials. But when enabling PhotoShare with web browsers, the wireless LAN connection for PhotoShare cannot be enabled, and default credentials are set to the other wireless network configured to the device. As a result, a remote attacker with access to the wireless LAN may obtain image data by using default credentials (CWE-284). Takayoshi Isayama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.