CVE-2017-2223 Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allow...
HighCVSS 8.8
EPSS 0.91%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iodata ts-wptcam camera firmware | <= 1.19 | No fix listed |
| iodata ts-ptcam camera firmware | <= 1.19 | No fix listed |
| iodata ts-ptcampoe camera firmware | <= 1.19 | No fix listed |
| iodata ts-wlc2 camera firmware | <= 1.19 | No fix listed |
| iodata ts-wlce camera firmware | <= 1.19 | No fix listed |
| iodata ts-wrlc camera firmware | <= 1.19 | No fix listed |
| iodata ts-wptcam2 firmware | <= 1.01 | No fix listed |
| i-o data device TS-WPTCAM | = firmware version 1.19 and earlier | No fix listed |
| i-o data device TS-PTCAM | = firmware version 1.19 and earlier | No fix listed |
| i-o data device TS-PTCAM/POE | = firmware version 1.19 and earlier | No fix listed |
| i-o data device TS-WLC2 | = firmware version 1.19 and earlier | No fix listed |
| i-o data device TS-WLCE | = firmware version 1.19 and earlier | No fix listed |
| i-o data device TS-WRLC | = firmware version 1.19 and earlier | No fix listed |
| i-o data device TS-WPTCAM2 | = firmware version 1.01 and earlier | No fix listed |
References
- www.iodata.jp patch vendor-advisory
- 99144 third-party-advisory vdb-entry
- JVN#65411235 third-party-advisory vdb-entry