CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2014-1990

Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.8%

CVSS Severity

CVSS v2 Score 6.8

References

http://jvn.jp/en/jp/JVN13313061/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000038
http://www.toshibatec.co.jp/page.jsp?id=4224
http://jvn.jp/en/jp/JVN13313061/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000038
http://www.toshibatec.co.jp/page.jsp?id=4224

Products affected by CVE-2014-1990

Toshibatec » E-Studio-232 » Version: N/A

cpe:2.3:h:toshibatec:e-studio-232:-
Toshibatec » E-Studio-233 » Version: N/A

cpe:2.3:h:toshibatec:e-studio-233:-
Toshibatec » E-Studio-282 » Version: N/A

cpe:2.3:h:toshibatec:e-studio-282:-
Toshibatec » E-Studio-283 » Version: N/A

cpe:2.3:h:toshibatec:e-studio-283:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-1990

Products

Pricing

Contact Us