medium6.8Public exploit code
CVE-2014-1990
Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allo…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- TOSHIBA e-Studio 232/233/282/283 - Cross-Site Request Forgery (Change Admin Password)2013-11-13 · webapps · hardware
Impact
Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Toshibatec | E-Studio-232 | All versions |
| Toshibatec | E-Studio-233 | All versions |
| Toshibatec | E-Studio-282 | All versions |
| Toshibatec | E-Studio-283 | All versions |