PT-2008-6505 · I O Data · Hdl-F320+3

Published 2008-12-09 · Updated 2017-08-08 · CVE-2008-5382

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions I-O DATA DEVICE HDL-F160 versions prior to 1.02 I-O DATA DEVICE HDL-F250 versions prior to 1.02 I-O DATA DEVICE HDL-F300 versions prior to 1.02 I-O DATA DEVICE HDL-F320 versions prior to 1.02

Description A cross-site request forgery (CSRF) issue allows remote attackers to change configurations or delete files as an authenticated user. The exact vectors used for the attack are unknown.

Recommendations For I-O DATA DEVICE HDL-F160 version prior to 1.02, update to version 1.02 or later. For I-O DATA DEVICE HDL-F250 version prior to 1.02, update to version 1.02 or later. For I-O DATA DEVICE HDL-F300 version prior to 1.02, update to version 1.02 or later. For I-O DATA DEVICE HDL-F320 version prior to 1.02, update to version 1.02 or later.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2008-5382

Affected Products

Hdl-F160

Hdl-F250

Hdl-F300

Hdl-F320

References · 6

• http://secunia.com/advisories/32836 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-5382 · Security Note
• http://osvdb.org/50183 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46880 · Note
• http://jvn.jp/en/jp/JVN70599814/index.html · Note
• http://iodata.jp/news/2008/important/hdl-f.htm · Note