CVE-2017-2223

2017-07-0713:00:00

jpcert

www.cve.org

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

62.0%

JSON

Cross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS-WLCE, TS-WRLC firmware version 1.19 and earlier and TS-WPTCAM2 firmware version 1.01 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CNA Affected

[
  {
    "product": "TS-WPTCAM",
    "vendor": "I-O DATA DEVICE, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.19 and earlier"
      }
    ]
  },
  {
    "product": "TS-PTCAM",
    "vendor": "I-O DATA DEVICE, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.19 and earlier"
      }
    ]
  },
  {
    "product": "TS-PTCAM/POE",
    "vendor": "I-O DATA DEVICE, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.19 and earlier"
      }
    ]
  },
  {
    "product": "TS-WLC2",
    "vendor": "I-O DATA DEVICE, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.19 and earlier"
      }
    ]
  },
  {
    "product": "TS-WLCE",
    "vendor": "I-O DATA DEVICE, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.19 and earlier"
      }
    ]
  },
  {
    "product": "TS-WRLC",
    "vendor": "I-O DATA DEVICE, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.19 and earlier"
      }
    ]
  },
  {
    "product": "TS-WPTCAM2",
    "vendor": "I-O DATA DEVICE, INC.",
    "versions": [
      {
        "status": "affected",
        "version": "firmware version 1.01 and earlier"
      }
    ]
  }
]