Skip to content
OpenAdvisories
Unscored CVE-2017-2223 EUVD-2017-11406GHSA-f6cr-72hv-6m28

Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and e…

Published Jul 7, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: I-O DATA DEVICE Product: TS-PTCAM Product: TS-PTCAM/POE Product: TS-WLC2 Product: TS-WLCE Product: TS-WPTCAM Product: TS-WPTCAM2 Product: TS-WRLC

Description

Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

VendorProductAffectedFixed
I-O DATA DEVICE TS-WPTCAM firmware version 1.19 and earlier —
I-O DATA DEVICE TS-PTCAM firmware version 1.19 and earlier —
I-O DATA DEVICE TS-PTCAM/POE firmware version 1.19 and earlier —
I-O DATA DEVICE TS-WLC2 firmware version 1.19 and earlier —
I-O DATA DEVICE TS-WLCE firmware version 1.19 and earlier —
I-O DATA DEVICE TS-WRLC firmware version 1.19 and earlier —
I-O DATA DEVICE TS-WPTCAM2 firmware version 1.01 and earlier —

References