VulnerabilityModified
CVE-2014-0361
The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via…
LOW 3.0EPSS 0.29%
Does this matter?
Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.
Description
The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT file.
- CVSS 2.0
- 3.0 LOWAV:L/AC:M/Au:S/C:P/I:P/A:N
- EPSS
- 0.29% probability · 21th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- toshibacommerce/4690 point of sale operating system
- Source
- cret@cert.org
References
- http://www-01.ibm.com/support/docview.wss?uid=pos1R1005054Vendor Advisory
- http://www.kb.cert.org/vuls/id/622950US Government Resource
- http://www-01.ibm.com/support/docview.wss?uid=pos1R1005054Vendor Advisory
- http://www.kb.cert.org/vuls/id/622950US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.