CVE-2014-2358

no score yetEPSS 0.6%

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative web interface in the proxy server on Fox-IT Fox DataDiode appliances before 1.7.2 allow remote attackers to hijack the authentication of administrators for requests that (1) create administrative users, (2) remove administrative users, or (3) change permissions.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2014-10-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fox-it:fox_datadiode

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-269-02
https://ics-cert.us-cert.gov/advisories/ICSA-14-269-02

Check your stack JSON