Back to Database
Status published
Medium
CVE-2014-4875
CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7...
Vulnerability Description
CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcoded AES key, which allows attackers to discover Back Office System Server (BOSS) DB2 database credentials by leveraging knowledge of this key in conjunction with bossinfo.pro read access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-4875
Credits & Attribution
No credits recorded in the NVD database.
More from toshiba
View All →CVE-2022-30421
Improper Authentication vulnerability in Toshiba Storage Security Software V1.2.0.7413 is...
Unknown
0
CVE-2016-4840
Coordinate Plus App for Android 1.0.2 and earlier and Coordinate...
Medium
5.9
CVE-2015-0884
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for...
Medium
6.9
CVE-2014-4876
Toshiba 4690 Operating System 6 Release 3, when the ADXSITCF...
Low
3.7
CVE-2012-4981
Toshiba ConfigFree 8.0.38 has a CF7 File Remote Command Execution...
High
8.8
Affected Vendor
toshiba
View all reports →Affected Software
chec
Vulnerable Versions:
0, 6.7
Timeline
Official Publish:
June 24th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.