Vulnerabilities > Toshibatec
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2014-04-19 | CVE-2014-1990 | Cross-Site Request Forgery (CSRF) vulnerability in Toshibatec products Cross-site request forgery (CSRF) vulnerability in TopAccess (aka the web-based management utility) on TOSHIBA TEC e-Studio 232, 233, 282, and 283 devices allows remote attackers to hijack the authentication of administrators for requests that change passwords. | 6.8 |
| 2012-04-06 | CVE-2012-1239 | Permissions, Privileges, and Access Controls vulnerability in Toshibatec products The TopAccess web-based management interface on TOSHIBA TEC e-Studio multi-function peripheral (MFP) devices with firmware 30x through 302, 35x through 354, and 4xx through 421 allows remote attackers to bypass authentication and obtain administrative privileges via unspecified vectors. | 10.0 |