Hardcoded credentials

2015-06-2410:59:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.4%

JSON

CreateBossCredentials.jar in Toshiba CHEC before 6.6 build 4014 and 6.7 before build 4329 contains a hardcoded AES key, which allows attackers to discover Back Office System Server (BOSS) DB2 database credentials by leveraging knowledge of this key in conjunction with bossinfo.pro read access.

CPENameOperatorVersion
checle6.6
checeq6.7

CPE	Name	Operator	Version
	chec	le	6.6
	chec	eq	6.7

References

www.kb.cert.org/vuls/id/301788

www.kb.cert.org/vuls/id/JLAD-9X4SPN