Login Request a demo
Unscored severity · published Jun 24, 2015
CVE-2014-4875
CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcoded AES key, which allows attackers to discover Back Office System…
–
CVSS
2.1%
EPSS
No
On KEV
Description
CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcoded AES key, which allows attackers to discover Back Office System Server (BOSS) DB2 database credentials by leveraging knowledge of this key in conjunction with bossinfo.pro read access.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chec · Toshiba
through 6.6; 6.7 · source: NVD
Affected product
CH
Chec
Toshiba
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4875
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4875
Third Party Advisory
http://www.kb.cert.org/vuls/id/301788
Third Party Advisory
http://www.kb.cert.org/vuls/id/JLAD-9X4SPN