CVE-2013-4713 Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
LowCVSS 3.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in I-O DATA DEVICE RockDisk with firmware before 1.05e1-2.0.5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iodata rockdisk firmware | <= 1.05c-2.0.3 | No fix listed |
| iodata rockdisk firmware | = 1.03v3-1.13 | No fix listed |
| iodata rockdisk firmware | = 1.03w-1.14 | No fix listed |
| iodata rockdisk firmware | = 1.03y-1.16-beta | No fix listed |
| iodata rockdisk firmware | = 1.04a-1.2 | No fix listed |
| iodata rockdisk firmware | = 1.04b-1.21 | No fix listed |
| iodata rockdisk firmware | = 1.04d-2.0.1 | No fix listed |
| iodata rockdisk firmware | = 1.04m-2.0.1 | No fix listed |
| iodata rockdisk firmware | = 1.04n-2.0.1 | No fix listed |
| iodata rockdisk firmware | = 1.04r3-2.0.1 | No fix listed |
| iodata rockdisk firmware | = 1.04t-2.0.2 | No fix listed |
| iodata rockdisk | All versions | No fix listed |
References
- JVN#74608669 third-party-advisory
- JVNDB-2013-000096 third-party-advisory
- www.ioplaza.jp patch