Description
Cross-site request forgery (CSRF) vulnerability in I-O DATA DEVICE HDL-F160, HDL-F250, HDL-F300, and HDL-F320 firmware before 1.02 allows remote attackers to (1) change a configuration or (2) delete files as an authenticated user via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- JVN#70599814 third-party-advisory
- http://www.iodata.jp/news/2008/important/hdl-f.htm
- hdlf-unspecified-csrf(46880) vdb-entry
- 32836 third-party-advisory
- 50183 vdb-entry