JVN#61317238: ETX-R vulnerable to cross-site request forgery

ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a cross-site request forgery vulnerability (CWE-352).

Impact

If a user views a malicious page while logged in, unintended operations may be performed.

Solution

Apply a Workaround
The following workarounds may mitigate the affects of this vulnerability.

• Do not access other websites while logged into the management screen
• Logout when closing the maangement screen
• Configure the setting “Login timeout”

Products Affected

• ETX-R