CSRF in I-O Data Hlf-F160
CVE-2008-5382
Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.007 (48.5th percentile) — read the EPSS interpretation.
Affected products
- I-o_data Hlf-f160
- I-o_data Hlf-f250
- I-o_data Hlf-f300
- I-o_data Hlf-f320
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_JVN, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)