JVN#47164236: AQUOS Photo Player HN-PP150 vulnerable to cross-site request forgery

AQUOS Photo Player HN-PP150 provided by Sharp Corporation contains a cross-site request forgery vulnerability (CWE-352).

Impact

If a user views a malicious page, information such as settings may be altered unintentionaly.

Solution

Update the Firmware
Update to the latest firmware version according to the information provided by the developer.

Products Affected

• AQUOS Photo Player HN-PP150 Versions from 1.02.00.04 to 1.03.01.04
  According to the developer, HN-PP100 has no network functionality therefore it is not affected by this vulnerability.