CVE-2014-1990: CSRF
Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1990?
CVE-2014-1990 is classified as a high severity vulnerability due to its capability to allow unauthorized changes to administrator passwords.
How do I fix CVE-2014-1990?
To fix CVE-2014-1990, ensure your TOSHIBA TEC e-Studio devices are updated to the latest firmware version that addresses the CSRF vulnerability.
Who is affected by CVE-2014-1990?
CVE-2014-1990 affects users of TOSHIBA TEC e-Studio models 232, 233, 282, and 283 that utilize the TopAccess management utility.
What type of attack does CVE-2014-1990 enable?
CVE-2014-1990 enables a cross-site request forgery (CSRF) attack that can hijack authentication of admin users.
Is CVE-2014-1990 still a concern for TOSHIBA TEC e-Studio users?
Yes, CVE-2014-1990 remains a concern for users who have not yet implemented security updates to mitigate the vulnerability.