CVE-2008-5382 Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete f...
MediumCVSS 6.8
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| i-o data hlf-f160 | All versions | No fix listed |
| i-o data hlf-f250 | All versions | No fix listed |
| i-o data hlf-f300 | All versions | No fix listed |
| i-o data hlf-f320 | All versions | No fix listed |
References
- JVN#70599814 third-party-advisory
- 50183 vdb-entry
- 32836 third-party-advisory vendor-advisory
- www.iodata.jp
- hdlf-unspecified-csrf(46880) vdb-entry