What is the CVSS score of CVE-2014-0361?

CVE-2014-0361 has a CVSS 2.0 base score of 3.0 (Low). CVSS vector: AV:L/AC:M/Au:S/C:P/I:P/A:N. EPSS exploitation probability: 0.1%.

4690 Point Of Sale Operating System CVE-2014-0361

LOW

Cryptographic Issues (CWE-310)

2014-04-21 cret@cert.org

IBM Information Disclosure 4690 Point Of Sale Operating System

3.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

3.0 LOW

AV:L/AC:M/Au:S/C:P/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:S/C:P/I:P/A:N

Attack Vector

Local

Attack Complexity

Confidentiality

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Apr 21, 2014 - 22:55 cve.org

LOW 3.0

DescriptionCVE.org

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT file.

AnalysisAI

The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for. Rated low severity (CVSS 3.0). No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-310. The default configuration of IBM 4690 OS, as used in Toshiba Global Commerce Solutions 4690 POS and other products, hashes passwords with the ADXCRYPT algorithm, which makes it easier for context-dependent attackers to obtain sensitive information via unspecified cryptanalysis of an ADXCSOUF.DAT file. Affected products include: Toshibacommerce 4690 Point Of Sale Operating System.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.